blallo/tt-rss
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

title escaping: do not double-encode entities

Browse source
This commit is contained in:
Andrew Dolgov 2013-03-23 09:44:52 +04:00
parent 01dffac771
commit d6ce708930
2 changed files with 4 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
classes/feeds.php
View file

@ -432,7 +432,8 @@ class Feeds extends Handler_Protected {
$reply['content'] .= "<div onclick='return hlClicked(event, $id)'
class=\"hlTitle\"><span class='hlContent$hlc_suffix'>";
$reply['content'] .= "<a id=\"RTITLE-$id\"
href=\"" . htmlspecialchars($line["link"]) . "\"
href=\"" . htmlspecialchars($line["link"], ENT_COMPAT | ENT_HTML401,
'utf-8', false) . "\"
onclick=\"\">" .
truncate_string($line["title"], 200);

3
include/functions.php
View file

@ -3022,7 +3022,8 @@
if ($line["link"]) {
$rv['content'] .= "<div class='postTitle'><a target='_blank'
title=\"".htmlspecialchars($line['title'])."\"
title=\"".htmlspecialchars($line["link"], ENT_COMPAT | ENT_HTML401,
'utf-8', false)."\"
href=\"" .
htmlspecialchars($line["link"]) . "\">" .
$line["title"] . "</a>" .