From 21adbad4c1a0f9a7953c3c011a3669d09cfc2bb4 Mon Sep 17 00:00:00 2001 From: friendica Date: Thu, 14 Aug 2014 20:19:28 -0700 Subject: in HTML email notifications, angle brackets in posts were unescaped - including those in code blocks. --- include/enotify.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/include/enotify.php b/include/enotify.php index e5d45c470..b0f6b4823 100644 --- a/include/enotify.php +++ b/include/enotify.php @@ -411,7 +411,7 @@ function notification($params) { $textversion = strip_tags(html_entity_decode(bbcode(stripslashes(str_replace(array("\\r", "\\n"), array( "", "\n"), $body))),ENT_QUOTES,'UTF-8')); - $htmlversion = html_entity_decode(bbcode(stripslashes(str_replace(array("\\r","\\n"), array("","
\n"),$body))), ENT_QUOTES,'UTF-8'); + $htmlversion = bbcode(stripslashes(str_replace(array("\\r","\\n"), array("","
\n"),$body))); // use $_SESSION['zid_override'] to force zid() to use -- cgit v1.2.3