close an xss hole

This commit is contained in:
Shish 2010-07-26 17:32:07 +01:00
parent d8ae474efc
commit e836c6b870

@ -16,7 +16,7 @@ class RSS_Images extends Extension {
$title = $config->get_string('title');
if(count($event->search_terms) > 0) {
$search = implode(' ', $event->search_terms);
$search = html_escape(implode(' ', $event->search_terms));
$page->add_header("<link id=\"images\" rel=\"alternate\" type=\"application/rss+xml\" ".
"title=\"$title - Images with tags: $search\" href=\"".make_link("rss/images/$search/1")."\" />");
}