From 0773871451ff132a1facfc32e30bf3e81a4e759a Mon Sep 17 00:00:00 2001
From: Andreas Gohr <andi@splitbrain.org>
Date: Tue, 18 Oct 2005 22:06:33 +0200
Subject: fix for XSS bug #595

darcs-hash:20051018200633-7ad00-959b25da1390a8d86e546b59ffe9a49094afb205.gz
---
 inc/parser/xhtml.php | 1 +
 1 file changed, 1 insertion(+)

(limited to 'inc/parser/xhtml.php')

diff --git a/inc/parser/xhtml.php b/inc/parser/xhtml.php
index 73ef58767..f58b52029 100644
--- a/inc/parser/xhtml.php
+++ b/inc/parser/xhtml.php
@@ -676,6 +676,7 @@ class Doku_Renderer_xhtml extends Doku_Renderer {
             $link['class']='media';
         }
 
+        $address = $this->_xmlEntities($address);
         $address = obfuscate($address);
         $title   = $address;
         if(empty($name)){
-- 
cgit v1.2.3