From 962d8ba4e147e54158b7fa8b446b03636408f103 Mon Sep 17 00:00:00 2001
From: Andrew Dolgov <fox@bah.spb.su>
Date: Sat, 17 May 2008 10:22:08 +0100
Subject: vf_catchup_link: use onclick, instead of href

---
 functions.php | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

(limited to 'functions.php')

diff --git a/functions.php b/functions.php
index d01c31d56..f8d806715 100644
--- a/functions.php
+++ b/functions.php
@@ -4934,8 +4934,9 @@
 							$cur_feed_title = $line["feed_title"];
 							$vgroup_last_feed = $feed_id;
 
+							$cur_feed_title = htmlspecialchars($cur_feed_title);
 
-							$vf_catchup_link = "(<a href='javascript:catchupFeedInGroup($feed_id, \"$cur_feed_title\")'>mark as read</a>)";
+							$vf_catchup_link = "(<a onclick='javascript:catchupFeedInGroup($feed_id, \"$cur_feed_title\");' href='#'>mark as read</a>)";
 
 							print "<tr class='feedTitle'><td colspan='7'>".
 								"<a href=\"javascript:viewfeed($feed_id, '', false)\">".
@@ -5006,7 +5007,9 @@
 							$cur_feed_title = $line["feed_title"];
 							$vgroup_last_feed = $feed_id;
 
-							$vf_catchup_link = "(<a href='javascript:catchupFeedInGroup($feed_id, \"$cur_feed_title\")'>mark as read</a>)";
+							$cur_feed_title = htmlspecialchars($cur_feed_title);
+
+							$vf_catchup_link = "(<a onclick='javascript:catchupFeedInGroup($feed_id, \"$cur_feed_title\");' href='#'>mark as read</a>)";
 
 							print "<div class='cdmFeedTitle'>".
 								"<a href=\"javascript:viewfeed($feed_id, '', false)\">".
-- 
cgit v1.2.3