diff options
| -rw-r--r-- | modules/profile.module | 2 | ||||
| -rw-r--r-- | modules/profile/profile.module | 2 |
2 files changed, 2 insertions, 2 deletions
diff --git a/modules/profile.module b/modules/profile.module index 63c9eda8e..1123ba4c7 100644 --- a/modules/profile.module +++ b/modules/profile.module @@ -190,7 +190,7 @@ function _profile_user_view(&$user, $mode) { case "textfield": case "textarea": case "checkbox": - $value = ($t == "profile_homepage") ? "<a href=\"". check_output($user->$t) ."\">". check_output($user->$t) ."</a>" : check_output($user->$t); + $value = ($t == "profile_homepage") ? "<a href=\"". drupal_specialchars($user->$t) ."\">". check_output($user->$t) ."</a>" : check_output($user->$t); $output .= form_item($field[1], $value); break; case "select": diff --git a/modules/profile/profile.module b/modules/profile/profile.module index 63c9eda8e..1123ba4c7 100644 --- a/modules/profile/profile.module +++ b/modules/profile/profile.module @@ -190,7 +190,7 @@ function _profile_user_view(&$user, $mode) { case "textfield": case "textarea": case "checkbox": - $value = ($t == "profile_homepage") ? "<a href=\"". check_output($user->$t) ."\">". check_output($user->$t) ."</a>" : check_output($user->$t); + $value = ($t == "profile_homepage") ? "<a href=\"". drupal_specialchars($user->$t) ."\">". check_output($user->$t) ."</a>" : check_output($user->$t); $output .= form_item($field[1], $value); break; case "select": |