From e78f91c91a178f564dc845905ea4b21928e57c3c Mon Sep 17 00:00:00 2001
From: Bharat Mediratta <bharat@menalto.com>
Date: Sat, 27 Jun 2009 14:29:58 -0700
Subject: Fix XSS vulnerability, get rid of unnecessary curly braces.

---
 modules/digibug/views/digibug_album.html.php | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

(limited to 'modules')

diff --git a/modules/digibug/views/digibug_album.html.php b/modules/digibug/views/digibug_album.html.php
index 2d9cf641..2fd8803b 100644
--- a/modules/digibug/views/digibug_album.html.php
+++ b/modules/digibug/views/digibug_album.html.php
@@ -1,8 +1,8 @@
 <?php defined("SYSPATH") or die("No direct script access.") ?>
 <div class="gDigibugPrintButton">
   <a class="gButtonLink ui-corner-all ui-state-default ui-icon-left"
-     href="<?= url::site("digibug/print_photo/$id?csrf={$csrf}") ?>"
+     href="<?= url::site("digibug/print_photo/$id?csrf=$csrf") ?>"
      title="<?= p::clean($title) ?>">
-    <span class="ui-icon ui-icon-print"><?= $title ?></span>
+    <span class="ui-icon ui-icon-print"><?= p::clean($title) ?></span>
   </a>
-</div>
\ No newline at end of file
+</div>
-- 
cgit v1.2.3