From b9dffa91073c2d20f81562c5d79fa9c0546aa6df Mon Sep 17 00:00:00 2001 From: friendica Date: Thu, 14 Aug 2014 18:00:48 -0700 Subject: escape tags when using markdown. Strange things happen if you put HTML entities in the text. --- mod/item.php | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'mod/item.php') diff --git a/mod/item.php b/mod/item.php index 0e2456df3..92dc3e7c6 100644 --- a/mod/item.php +++ b/mod/item.php @@ -430,8 +430,8 @@ function item_post(&$a) { if($mimetype === 'text/bbcode') { if(local_user() && local_user() == $profile_uid && feature_enabled(local_user(),'markdown')) { - require_once('include/bb2diaspora.php'); - $body = diaspora2bb($body,true); + require_once('include/bb2diaspora.php'); + $body = diaspora2bb(escape_tags($body),true); } -- cgit v1.2.3