From d6648c0affd122407b7567442aa924e9138104e7 Mon Sep 17 00:00:00 2001 From: Tim Almdal Date: Sat, 4 Jul 2009 08:17:12 -0700 Subject: Fix for ticket #477. Use nl2br method when rendering comment::text and item::description. In addition add p::clean or p::purify to places that xss cleaning had missed (i.e. rss feeds) --- modules/gallery/helpers/gallery_rss.php | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'modules/gallery/helpers/gallery_rss.php') diff --git a/modules/gallery/helpers/gallery_rss.php b/modules/gallery/helpers/gallery_rss.php index 6e966bdb..7daf6170 100644 --- a/modules/gallery/helpers/gallery_rss.php +++ b/modules/gallery/helpers/gallery_rss.php @@ -52,9 +52,9 @@ class gallery_rss_Core { ->viewable() ->descendants($limit, $offset, "photo"); $feed->max_pages = ceil($item->viewable()->descendants_count("photo") / $limit); - $feed->title = $item->title; + $feed->title = p::purify($item->title); $feed->link = url::abs_site("albums/{$item->id}"); - $feed->description = $item->description; + $feed->description = nl2br(p::purify($item->description)); return $feed; } -- cgit v1.2.3