diff options
Diffstat (limited to 'functions.php')
| -rw-r--r-- | functions.php | 7 |
1 files changed, 5 insertions, 2 deletions
diff --git a/functions.php b/functions.php index d01c31d56..f8d806715 100644 --- a/functions.php +++ b/functions.php @@ -4934,8 +4934,9 @@ $cur_feed_title = $line["feed_title"]; $vgroup_last_feed = $feed_id; + $cur_feed_title = htmlspecialchars($cur_feed_title); - $vf_catchup_link = "(<a href='javascript:catchupFeedInGroup($feed_id, \"$cur_feed_title\")'>mark as read</a>)"; + $vf_catchup_link = "(<a onclick='javascript:catchupFeedInGroup($feed_id, \"$cur_feed_title\");' href='#'>mark as read</a>)"; print "<tr class='feedTitle'><td colspan='7'>". "<a href=\"javascript:viewfeed($feed_id, '', false)\">". @@ -5006,7 +5007,9 @@ $cur_feed_title = $line["feed_title"]; $vgroup_last_feed = $feed_id; - $vf_catchup_link = "(<a href='javascript:catchupFeedInGroup($feed_id, \"$cur_feed_title\")'>mark as read</a>)"; + $cur_feed_title = htmlspecialchars($cur_feed_title); + + $vf_catchup_link = "(<a onclick='javascript:catchupFeedInGroup($feed_id, \"$cur_feed_title\");' href='#'>mark as read</a>)"; print "<div class='cdmFeedTitle'>". "<a href=\"javascript:viewfeed($feed_id, '', false)\">". |