fix quote

diff --git a/docs/NEWS b/docs/NEWS
index fe2e2c34ac7a9981ef10aec9584dd7a094ce34ba..c41e81504908140b50576ef39a8b9d8df0de0564 100644 (file)
--- a/docs/NEWS
+++ b/docs/NEWS
@@ -208,6 +208,12 @@ Version 1.1-alpha5()
    * Removed config option "XHTML11 compliance" and enabled by default
      now (garvinhicking)
 
+Version 1.0.1 ()
+------------------------------------------------------------------------
+
+    * Chorizo Security Checks: Fixed possible browser-dependant attribute 
+      injection in the templatechooser-Plugin (garvinhicking)
+
 Version 1.0 (June 15th, 2006)
 ------------------------------------------------------------------------
 

diff --git a/include/functions_permalinks.inc.php b/include/functions_permalinks.inc.php
index fd4557b1b13a959ae6a26034b4113a907e0158a1..560782799c1909dc002aadaf94c44899fb540349 100644 (file)
--- a/include/functions_permalinks.inc.php
+++ b/include/functions_permalinks.inc.php
@@ -707,13 +707,15 @@ function serendipity_currentURL() {
             '"',
             "'",
             '<',
-            '>'
+            '>',
+            '`'
         ),
 
         array(
             '',
             '',
             '',
+            '',
             ''
         ),