From d6648c0affd122407b7567442aa924e9138104e7 Mon Sep 17 00:00:00 2001 From: Tim Almdal Date: Sat, 4 Jul 2009 08:17:12 -0700 Subject: Fix for ticket #477. Use nl2br method when rendering comment::text and item::description. In addition add p::clean or p::purify to places that xss cleaning had missed (i.e. rss feeds) --- modules/comment/views/admin_block_recent_comments.html.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'modules/comment/views/admin_block_recent_comments.html.php') diff --git a/modules/comment/views/admin_block_recent_comments.html.php b/modules/comment/views/admin_block_recent_comments.html.php index 893c1a63..4ff24f86 100644 --- a/modules/comment/views/admin_block_recent_comments.html.php +++ b/modules/comment/views/admin_block_recent_comments.html.php @@ -10,7 +10,7 @@ created) ?> %author_name said %comment_text', array("author_name" => p::clean($comment->author_name()), - "comment_text" => text::limit_words(p::purify($comment->text), 50))); ?> + "comment_text" => text::limit_words(nl2br(p::purify($comment->text)), 50))); ?> -- cgit v1.2.3