diff options
Diffstat (limited to 'app/Module/FamilyTreeNewsModule.php')
| -rw-r--r-- | app/Module/FamilyTreeNewsModule.php | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/app/Module/FamilyTreeNewsModule.php b/app/Module/FamilyTreeNewsModule.php index a26b6b88c7..899119780d 100644 --- a/app/Module/FamilyTreeNewsModule.php +++ b/app/Module/FamilyTreeNewsModule.php @@ -101,7 +101,7 @@ class FamilyTreeNewsModule extends AbstractModule implements ModuleBlockInterfac foreach ($articles as $article) { $content .= '<div class="news_box">'; - $content .= '<div class="news_title">' . Filter::escapeHtml($article->subject) . '</div>'; + $content .= '<div class="news_title">' . Html::escape($article->subject) . '</div>'; $content .= '<div class="news_date">' . FunctionsDate::formatTimestamp($article->updated) . '</div>'; if ($article->body == strip_tags($article->body)) { $article->body = nl2br($article->body, false); @@ -111,7 +111,7 @@ class FamilyTreeNewsModule extends AbstractModule implements ModuleBlockInterfac $content .= '<hr>'; $content .= '<a href="editnews.php?news_id=' . $article->news_id . '&ctype=gedcom&ged=' . $WT_TREE->getNameHtml() . '">' . I18N::translate('Edit') . '</a>'; $content .= ' | '; - $content .= '<a href="editnews.php?action=delete&news_id=' . $article->news_id . '&ctype=gedcom&ged=' . $WT_TREE->getNameHtml() . '" onclick="return confirm(\'' . I18N::translate('Are you sure you want to delete “%s”?', Filter::escapeHtml($article->subject)) . "');\">" . I18N::translate('Delete') . '</a><br>'; + $content .= '<a href="editnews.php?action=delete&news_id=' . $article->news_id . '&ctype=gedcom&ged=' . $WT_TREE->getNameHtml() . '" onclick="return confirm(\'' . I18N::translate('Are you sure you want to delete “%s”?', Html::escape($article->subject)) . "');\">" . I18N::translate('Delete') . '</a><br>'; } $content .= '</div>'; } |