Page 1 of 1

Contact Form does not encode html special characters

Posted: Thu Dec 04, 2008 11:50 am
by sonichouse
I noticed this when getting my blog to validate XHTML.

The offending code is in serendipity_event_contactform.php

Code: Select all

if ($this->selected()) {
$serendipity['head_title']    = $this->get_config('pagetitle');
$serendipity['head_subtitle'] = htmlspecialchars($serendipity['blogTitle']);
}
break;
Just added htmlspecialchars() function around the blogTitle.

Re: Contact Form does not encode html special characters

Posted: Thu Dec 04, 2008 11:56 am
by garvinhicking
Hi!

Committed.

Regards,
Garvin

Posted: Thu Dec 04, 2008 12:00 pm
by sonichouse
Thanks - and so quick :lol: