- web: escape forum RSS entries instead of stripping tags

(from Nicolas; fixes #899)

svn path=/trunk/boinc/; revision=18190
This commit is contained in:
David Anderson 2009-05-22 17:38:46 +00:00
parent 4287dface3
commit 2cf3c39055
2 changed files with 8 additions and 2 deletions

View File

@ -4706,4 +4706,10 @@ Rom 20 May 2009
/ /
configure.ac configure.ac
version.h version.h
David 22 May 2009
- web: escape forum RSS entries instead of stripping tags
(from Nicolas; fixes #899)
html/user/
forum_rss.php

View File

@ -122,7 +122,7 @@ foreach ($threads as $thread) {
<title>".strip_tags($thread->title)."</title> <title>".strip_tags($thread->title)."</title>
<link>$unique_url</link> <link>$unique_url</link>
<guid isPermaLink=\"true\">$unique_url</guid> <guid isPermaLink=\"true\">$unique_url</guid>
<description>".substr(strip_tags($post->content),0,255)." . . .</description> <description>".htmlspecialchars(htmlspecialchars(substr($post->content,0,255)))." . . .</description>
<pubDate>$post_date</pubDate> <pubDate>$post_date</pubDate>
</item> </item>
"; ";