summaryrefslogtreecommitdiff
path: root/modules/comment/views/admin_block_recent_comments.html.php
diff options
context:
space:
mode:
authorTim Almdal <tnalmdal@shaw.ca>2009-07-03 21:44:10 -0700
committerTim Almdal <tnalmdal@shaw.ca>2009-07-03 21:44:10 -0700
commit54ffea24196e8f5d88cf9d8607455f0f6aab305c (patch)
treefc0443ec5b8976d154134f667e21adb80cfea06d /modules/comment/views/admin_block_recent_comments.html.php
parenta633c134b754305eaa611c5d67af4ca7c79beafe (diff)
Split the clean method into two clean and purify. clean is a light weight
approach using html::specialchars and purify uses HTMLPurifier to intelligently cleanse the output fields. Use purifier for text and title fields where it is likely that a user would enter html to format their data.
Diffstat (limited to 'modules/comment/views/admin_block_recent_comments.html.php')
-rw-r--r--modules/comment/views/admin_block_recent_comments.html.php2
1 files changed, 1 insertions, 1 deletions
diff --git a/modules/comment/views/admin_block_recent_comments.html.php b/modules/comment/views/admin_block_recent_comments.html.php
index af4d946e..893c1a63 100644
--- a/modules/comment/views/admin_block_recent_comments.html.php
+++ b/modules/comment/views/admin_block_recent_comments.html.php
@@ -10,7 +10,7 @@
<?= gallery::date_time($comment->created) ?>
<?= t('<a href="#">%author_name</a> said <em>%comment_text</em>',
array("author_name" => p::clean($comment->author_name()),
- "comment_text" => text::limit_words(p::clean($comment->text), 50))); ?>
+ "comment_text" => text::limit_words(p::purify($comment->text), 50))); ?>
</li>
<? endforeach ?>
</ul>