From 1b5ce2b18f6cee7e13986ca49da9f60d43064e6f Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?G=C3=A1bor=20Hojtsy?= Date: Fri, 4 Jan 2008 13:50:50 +0000 Subject: #206272 report by yojoe, patch by myself: user provided data in menu titles should be check_plain()-ed not t()-ed --- modules/node/node.module | 1 + 1 file changed, 1 insertion(+) (limited to 'modules') diff --git a/modules/node/node.module b/modules/node/node.module index 56d4b75be..1e6bcc8d6 100644 --- a/modules/node/node.module +++ b/modules/node/node.module @@ -1423,6 +1423,7 @@ function node_menu() { $type_url_str = str_replace('_', '-', $type->type); $items['node/add/'. $type_url_str] = array( 'title' => drupal_ucfirst($type->name), + 'title callback' => 'check_plain', 'page callback' => 'node_add', 'page arguments' => array(2), 'access callback' => 'node_access', -- cgit v1.2.3