diff options
Diffstat (limited to 'templates/part.items.php')
| -rw-r--r-- | templates/part.items.php | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/templates/part.items.php b/templates/part.items.php index 185fc099b..6d6369ab7 100644 --- a/templates/part.items.php +++ b/templates/part.items.php @@ -49,10 +49,10 @@ foreach($items as $item) { echo '</ul>'; echo '</div>'; - echo '<h1 class="item_title"><a target="_blank" href="' . $item->getUrl() . '">' . $item->getTitle() . '</a></h1>'; + echo '<h1 class="item_title"><a target="_blank" href="' . $item->getUrl() . '">' . htmlspecialchars($item->getTitle(), ENT_QUOTES, 'UTF-8') . '</a></h1>'; if(($item->getAuthor() !== null) && (trim($item->getAuthor()) != '')){ - echo '<h2 class="item_author">'. $l->t('by') . ' ' . $item->getAuthor() . '</h2>'; + echo '<h2 class="item_author">'. $l->t('by') . ' ' . htmlspecialchars($item->getAuthor(), ENT_QUOTES, 'UTF-8') . '</h2>'; } echo '<div class="body">' . $item->getBody() . '</div>'; |