From 708f27f483d70660446ea2132b02cb7b39225f98 Mon Sep 17 00:00:00 2001 From: Bharat Mediratta Date: Sun, 31 May 2009 00:11:48 -0700 Subject: Run p::clean() on any variables that contain data entered by users. --- modules/notification/views/comment_published.html.php | 18 +++++++++++------- modules/notification/views/item_added.html.php | 14 +++++++++----- 2 files changed, 20 insertions(+), 12 deletions(-) (limited to 'modules/notification') diff --git a/modules/notification/views/comment_published.html.php b/modules/notification/views/comment_published.html.php index 23588c72..ff2ba0bc 100644 --- a/modules/notification/views/comment_published.html.php +++ b/modules/notification/views/comment_published.html.php @@ -1,30 +1,34 @@ - <?= $subject ?> + <?= p::clean($subject) ?> -

+

- + - + - + - + - +
text ?>text) ?>
author_name() ?>author_name()) ?>
author_email() ?>author_email()) ?>
author_url() ?>author_url()) ?>
item()->url(array(), true) ?>#comments + + item()->url(array(), true) ?>#comments + +
diff --git a/modules/notification/views/item_added.html.php b/modules/notification/views/item_added.html.php index b67b9f38..32857c08 100644 --- a/modules/notification/views/item_added.html.php +++ b/modules/notification/views/item_added.html.php @@ -1,23 +1,27 @@ - <?= $subject ?> + <?= p::clean($subject) ?> -

+

- + - + description): ?> - +
title ?>title) ?>
url(array(), true) ?> + + url(array(), true) ?> + +
description ?>description) ?>
-- cgit v1.2.3