XML_RPC to 1.3.3
Fixing several bugs and vulnerabilities. (nohn)
+ * Make categories sidebar plugin show categories' description, not the
+ name on mouse over (garvinhicking)
+
* Fix possible exploit that sends comments to the blog owner and others
with arbitrary mailheaders and a link to invalid entries. Thanks to
Sebastian Raible! (garvinhicking)
if ( !empty($image) ) {
$html .= '<a href="'. serendipity_rewriteURL(PATH_FEEDS .'/'. PATH_CATEGORIES .'/'. serendipity_makePermalink(PERM_FEEDS_CATEGORIES, array('id' => $cat['categoryid'], 'title' => $cat['category_name']))) .'"><img src="'. $image .'" alt="XML" style="border: 0px" /></a> ';
}
- $html .= '<a href="'. serendipity_rewriteURL(PATH_CATEGORIES . '/' . serendipity_makePermalink(PERM_CATEGORIES, array('id' => $cat['categoryid'], 'title' => $cat['category_name'])), 'serendipityHTTPPath') .'" title="'. $cat['category_name'] .'" style="padding-left: '. $cat['depth']*6 .'px">'. $cat['category_name'] .'</a>';
+ $html .= '<a href="'. serendipity_rewriteURL(PATH_CATEGORIES . '/' . serendipity_makePermalink(PERM_CATEGORIES, array('id' => $cat['categoryid'], 'title' => $cat['category_name'])), 'serendipityHTTPPath') .'" title="'. htmlspecialchars($cat['category_description']) .'" style="padding-left: '. $cat['depth']*6 .'px">'. htmlspecialchars($cat['category_name']) .'</a>';
$html .= '</div>' . "\n";
}
}