summaryrefslogtreecommitdiff
path: root/modules/node/node.pages.inc
diff options
context:
space:
mode:
authorGábor Hojtsy <gabor@hojtsy.hu>2007-11-15 23:55:52 +0000
committerGábor Hojtsy <gabor@hojtsy.hu>2007-11-15 23:55:52 +0000
commit9c6e88636803dbdd660991e2d9458be5a74dfbd2 (patch)
treee996a7077ad6a78d30dd45b088e2bb76e95203b1 /modules/node/node.pages.inc
parent2934e7834aea1093179f6fbdd715e8b15f3d5e21 (diff)
downloadbrdo-9c6e88636803dbdd660991e2d9458be5a74dfbd2.tar.gz
brdo-9c6e88636803dbdd660991e2d9458be5a74dfbd2.tar.bz2
#189409 by Arancaytar: use filter_xss() to filter content type descriptions, instead of printing them verbatim (on one occassion) and printing them with check_plain() erroneusly on another
Diffstat (limited to 'modules/node/node.pages.inc')
-rw-r--r--modules/node/node.pages.inc2
1 files changed, 1 insertions, 1 deletions
diff --git a/modules/node/node.pages.inc b/modules/node/node.pages.inc
index fe112af8c..cceb6bdf8 100644
--- a/modules/node/node.pages.inc
+++ b/modules/node/node.pages.inc
@@ -29,7 +29,7 @@ function theme_node_add_list($content) {
$output = '<dl class="node-type-list">';
foreach ($content as $item) {
$output .= '<dt>'. l($item['title'], $item['href'], $item['options']) .'</dt>';
- $output .= '<dd>'. $item['description'] .'</dd>';
+ $output .= '<dd>'. filter_xss($item['description']) .'</dd>';
}
$output .= '</dl>';
}