From 708f27f483d70660446ea2132b02cb7b39225f98 Mon Sep 17 00:00:00 2001
From: Bharat Mediratta <bharat@menalto.com>
Date: Sun, 31 May 2009 00:11:48 -0700
Subject: Run p::clean() on any variables that contain data entered by users.

---
 modules/info/views/info_block.html.php | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

(limited to 'modules/info')

diff --git a/modules/info/views/info_block.html.php b/modules/info/views/info_block.html.php
index 880d5d3e..db664894 100644
--- a/modules/info/views/info_block.html.php
+++ b/modules/info/views/info_block.html.php
@@ -3,18 +3,18 @@
   <tbody>
     <tr>
       <th><?= t("Title:") ?></th>
-      <td><?= $item->title; ?></td>
+      <td><?= p::clean($item->title) ?></td>
     </tr>
     <? if ($item->description): ?>
     <tr>
       <th><?= t("Description:") ?></th>
-      <td><?= $item->description; ?></td>
+      <td><?= p::clean($item->description) ?></td>
     </tr>
     <? endif ?>
     <? if ($item->id != 1): ?>
     <tr>
       <th><?= t("Name:") ?></th>
-      <td><?= $item->name; ?></td>
+      <td><?= p::clean($item->name) ?></td>
     </tr>
     <? endif ?>
     <? if ($item->captured): ?>
@@ -26,7 +26,7 @@
     <? if ($item->owner): ?>
     <tr>
       <th><?= t("Owner:") ?></th>
-      <td><a href="#"><?= $item->owner->name ?></a></td>
+      <td><a href="#"><?= p::clean($item->owner->name) ?></a></td>
     </tr>
     <? endif ?>
   </tbody>
-- 
cgit v1.2.3