Fix for ticket #477. Use nl2br method when rendering comment::text and

item::description.  In addition add p::clean or p::purify to places that
xss cleaning had missed (i.e. rss feeds)
This commit is contained in:
Tim Almdal
2009-07-04 08:17:12 -07:00
parent 54ffea2419
commit d6648c0aff
14 changed files with 19 additions and 19 deletions
@@ -10,7 +10,7 @@
<?= gallery::date_time($comment->created) ?>
<?= t('<a href="#">%author_name</a> said <em>%comment_text</em>',
array("author_name" => p::clean($comment->author_name()),
"comment_text" => text::limit_words(p::purify($comment->text), 50))); ?>
"comment_text" => text::limit_words(nl2br(p::purify($comment->text)), 50))); ?>
</li>
<? endforeach ?>
</ul>