feedlist: htmlspecialchars() feed title

2009-06-12 11:40:29 +04:00 · 2009-06-12 11:40:29 +04:00 · 70c9b17314
parent 3213d148e1
commit 70c9b17314
1 changed files with 1 additions and 1 deletions
--- a/functions.php
+++ b/functions.php
@ -4261,7 +4261,7 @@
 	
 			while ($line = db_fetch_assoc($result)) {
 			
-				$feed = trim($line["title"]);
+				$feed = htmlspecialchars(trim($line["title"]));

 				if (!$feed) $feed = "[Untitled]";