diff options
| author | Dries Buytaert <dries@buytaert.net> | 2007-11-28 10:29:21 +0000 |
|---|---|---|
| committer | Dries Buytaert <dries@buytaert.net> | 2007-11-28 10:29:21 +0000 |
| commit | 7a47bef51436381e4c41a9d291f0eb9b88e63474 (patch) | |
| tree | 9e0a0d268f6ab1f49ebe0f5dda8ddb12040fb8f8 /modules/user | |
| parent | 673aba159b039568b93b015c5c8b97a71ec530f6 (diff) | |
| download | brdo-7a47bef51436381e4c41a9d291f0eb9b88e63474.tar.gz brdo-7a47bef51436381e4c41a9d291f0eb9b88e63474.tar.bz2 | |
- Patch #162381 by Heine et al: properly escape strings.
Diffstat (limited to 'modules/user')
| -rw-r--r-- | modules/user/user.pages.inc | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/modules/user/user.pages.inc b/modules/user/user.pages.inc index 7d0400d96..8fc4d2a8e 100644 --- a/modules/user/user.pages.inc +++ b/modules/user/user.pages.inc @@ -206,7 +206,7 @@ function template_preprocess_user_profile_item(&$variables) { * @see user-profile-category.tpl.php */ function template_preprocess_user_profile_category(&$variables) { - $variables['title'] = $variables['element']['#title']; + $variables['title'] = check_plain($variables['element']['#title']); $variables['profile_items'] = $variables['element']['#children']; $variables['attributes'] = ''; if (isset($variables['element']['#attributes'])) { |