diff options
| author | fisharebest <fisharebest@gmail.com> | 2011-11-08 23:36:32 +0000 |
|---|---|---|
| committer | fisharebest <fisharebest@gmail.com> | 2011-11-08 23:36:32 +0000 |
| commit | d57e4d98646238b46fddf0e33f86722220aede33 (patch) | |
| tree | 96ea96c5222c64963cf15245b92cd6e7c1e3896f | |
| parent | 8808e5ab9cd9998b21a6eb895be6dba8598ae873 (diff) | |
| download | webtrees-d57e4d98646238b46fddf0e33f86722220aede33.tar.gz webtrees-d57e4d98646238b46fddf0e33f86722220aede33.tar.bz2 webtrees-d57e4d98646238b46fddf0e33f86722220aede33.zip | |
Fix: special characters in media filenames can break HTML output.
| -rw-r--r-- | includes/functions/functions_print_lists.php | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/includes/functions/functions_print_lists.php b/includes/functions/functions_print_lists.php index 80f6243f5d..ad56c1f4ed 100644 --- a/includes/functions/functions_print_lists.php +++ b/includes/functions/functions_print_lists.php @@ -1199,7 +1199,7 @@ function print_media_table($datalist) { $name = $media->getFullName(); echo "<tr>"; //-- Object thumbnail - echo '<td><img src="', $media->getThumbnail(), '" alt="', $name, '" /></td>'; + echo '<td><img src="', $media->getThumbnail(), '" alt="', htmlspecialchars(strip_tags($name)), '" /></td>'; //-- Object name(s) echo '<td>'; echo '<a href="', $media->getHtmlUrl(), '" class="list_item name2">'; |