af_comics: escape all template urls

This commit is contained in:
Andrew Dolgov 2020-02-27 10:25:00 +03:00
parent 3b62150abd
commit 61168847ac
1 changed files with 1 additions and 1 deletions

View File

@ -206,7 +206,7 @@ class Af_Comics extends Plugin {
$tpl->setVariable('ARTICLE_CONTENT', "<p> " . $doc->saveHTML($content_node) . "</p>", true);
$tpl->setVariable('ARTICLE_AUTHOR', '', true);
$tpl->setVariable('ARTICLE_SOURCE_LINK', $article_link, true);
$tpl->setVariable('ARTICLE_SOURCE_LINK', htmlspecialchars($article_link), true);
$tpl->setVariable('ARTICLE_SOURCE_TITLE', "The Far Side", true);
$tpl->addBlock('entry');