Ticket #507 (fixed bug)
htmlspecialchars in help.php for links
- Created: 2011-10-12 05:59:09
- Reported by: daris
- Assigned to: quy
- Milestone: 1.4.8
- Component: markup
- Priority: normal
<p><code>[ url]<?php echo pun_htmlspecialchars(get_base_url(true).'/') ?>[ /url]</code> <?php echo $lang_help['produces'] ?> <samp><a href="<?php echo pun_htmlspecialchars(get_base_url(true).'/') ?>"><?php echo pun_htmlspecialchars(get_base_url(true).'/') ?></a></samp></p>
<p><code>[ url=/help.php]<?php echo $lang_help['This help page'] ?>[ /url]</code> <?php echo $lang_help['produces'] ?> <samp><a href="<?php echo get_base_url(true).'/help.php' ?>"><?php echo $lang_help['This help page'] ?></a></samp></p>
Shouldn't be htmlspecialchars used in above code also for help.php link like it is done for other links?
https://github.com/fluxbb/fluxbb/blob/f … lp.php#L58
