From d6648c0affd122407b7567442aa924e9138104e7 Mon Sep 17 00:00:00 2001
From: Tim Almdal
Date: Sat, 4 Jul 2009 08:17:12 -0700
Subject: Fix for ticket #477. Use nl2br method when rendering comment::text
and item::description. In addition add p::clean or p::purify to places that
xss cleaning had missed (i.e. rss feeds)
---
modules/comment/views/comment.html.php | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
(limited to 'modules/comment/views/comment.html.php')
diff --git a/modules/comment/views/comment.html.php b/modules/comment/views/comment.html.php
index 15121d08..ab72a0c8 100644
--- a/modules/comment/views/comment.html.php
+++ b/modules/comment/views/comment.html.php
@@ -13,6 +13,6 @@
"author_name" => p::clean($comment->author_name()))) ?>
- = p::purify($comment->text) ?>
+ = nl2br(p::purify($comment->text)) ?>
--
cgit v1.2.3