diff options
| author | friendica <info@friendica.com> | 2013-12-12 02:01:42 -0800 |
|---|---|---|
| committer | friendica <info@friendica.com> | 2013-12-12 02:01:42 -0800 |
| commit | 941f81eb300074b203dd480924f9cf8b9d41a08d (patch) | |
| tree | 0492f70620c1ed2001153632b95fa976bbe967fd /mod/search.php | |
| parent | b3fe221b7fe9c6ecc151d9c00f36d3913526f6a3 (diff) | |
| download | volse-hubzilla-941f81eb300074b203dd480924f9cf8b9d41a08d.tar.gz volse-hubzilla-941f81eb300074b203dd480924f9cf8b9d41a08d.tar.bz2 volse-hubzilla-941f81eb300074b203dd480924f9cf8b9d41a08d.zip | |
check that every invocation of htmlspecialchars has the right arg list
Diffstat (limited to 'mod/search.php')
| -rw-r--r-- | mod/search.php | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/mod/search.php b/mod/search.php index 7651b3a4e..2b31002fa 100644 --- a/mod/search.php +++ b/mod/search.php @@ -17,7 +17,7 @@ function search_saved_searches() { $o .= '<h3>' . t('Saved Searches') . '</h3>' . "\r\n"; $o .= '<ul id="saved-search-ul">' . "\r\n"; foreach($r as $rr) { - $o .= '<li class="saved-search-li clear"><a href="search/?f=&remove=1&search=' . rawurlencode($rr['term']) . '" title="' . t('Remove term') . '" onclick="return confirmDelete();"><i class="icon-remove drop-icons"></i></a> <a href="search/?f=&search=' . $rr['term'] . '" class="savedsearchterm" >' . htmlspecialchars($rr['term']) . '</a></li>' . "\r\n"; + $o .= '<li class="saved-search-li clear"><a href="search/?f=&remove=1&search=' . rawurlencode($rr['term']) . '" title="' . t('Remove term') . '" onclick="return confirmDelete();"><i class="icon-remove drop-icons"></i></a> <a href="search/?f=&search=' . $rr['term'] . '" class="savedsearchterm" >' . htmlspecialchars($rr['term'], ENT_COMPAT,'UTF-8') . '</a></li>' . "\r\n"; } $o .= '</ul><div class="clear"></div></div>' . "\r\n"; } @@ -272,9 +272,9 @@ function search_content(&$a,$update = 0, $load = false) { if($tag) - $o .= '<h2>Items tagged with: ' . htmlspecialchars($search) . '</h2>'; + $o .= '<h2>Items tagged with: ' . htmlspecialchars($search, ENT_COMPAT,'UTF-8') . '</h2>'; else - $o .= '<h2>Search results for: ' . htmlspecialchars($search) . '</h2>'; + $o .= '<h2>Search results for: ' . htmlspecialchars($search, ENT_COMPAT,'UTF-8') . '</h2>'; $o .= conversation($a,$items,'search',$update,'client'); |