Escape quotes in bookmarklet confirm message

This commit is contained in:
Alexandre Gravel-Raymond 2012-05-19 20:26:09 +02:00
parent 1bd11fdf95
commit b1e592d37f

View file

@ -1501,7 +1501,7 @@ class Pref_Feeds extends Protected_Handler {
$bm_subscribe_url = str_replace('%s', '', add_feed_url());
$confirm_str = __('Subscribe to %s in Tiny Tiny RSS?');
$confirm_str = str_replace("'", "\'", __('Subscribe to %s in Tiny Tiny RSS?'));
$bm_url = htmlspecialchars("javascript:{if(confirm('$confirm_str'.replace('%s',window.location.href)))window.location.href='$bm_subscribe_url'+window.location.href}");