diff options
| author | Gábor Hojtsy <gabor@hojtsy.hu> | 2008-01-04 13:50:50 +0000 |
|---|---|---|
| committer | Gábor Hojtsy <gabor@hojtsy.hu> | 2008-01-04 13:50:50 +0000 |
| commit | 1b5ce2b18f6cee7e13986ca49da9f60d43064e6f (patch) | |
| tree | 6dab6d99cb1e8e5651c5e25d1d7d4a45cf7ab83b /modules/node/node.module | |
| parent | 877122a4a14adaac4e8703ae43c96f589804170a (diff) | |
| download | brdo-1b5ce2b18f6cee7e13986ca49da9f60d43064e6f.tar.gz brdo-1b5ce2b18f6cee7e13986ca49da9f60d43064e6f.tar.bz2 | |
#206272 report by yojoe, patch by myself: user provided data in menu titles should be check_plain()-ed not t()-ed
Diffstat (limited to 'modules/node/node.module')
| -rw-r--r-- | modules/node/node.module | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/modules/node/node.module b/modules/node/node.module index 56d4b75be..1e6bcc8d6 100644 --- a/modules/node/node.module +++ b/modules/node/node.module @@ -1423,6 +1423,7 @@ function node_menu() { $type_url_str = str_replace('_', '-', $type->type); $items['node/add/'. $type_url_str] = array( 'title' => drupal_ucfirst($type->name), + 'title callback' => 'check_plain', 'page callback' => 'node_add', 'page arguments' => array(2), 'access callback' => 'node_access', |