Fix for ticket #477. Use nl2br method when rendering comment::text and

item::description.  In addition add p::clean or p::purify to places that
xss cleaning had missed (i.e. rss feeds)
This commit is contained in:
Tim Almdal
2009-07-04 08:17:12 -07:00
parent 54ffea2419
commit d6648c0aff
14 changed files with 19 additions and 19 deletions
@@ -132,7 +132,7 @@
</div>
</div>
<p><?= gallery::date($comment->created) ?></p>
<?= p::purify($comment->text) ?>
<?= nl2br(p::purify($comment->text)) ?>
</td>
<td>
<ul class="gButtonSetVertical">