From: garvinhicking Date: Tue, 26 Jul 2005 19:30:15 +0000 (+0000) Subject: Show category description on mouse over X-Git-Tag: 0.9~283 X-Git-Url: http://git.mjollnir.org/gw?a=commitdiff_plain;h=5aaa1f4186e209d0b2a60b445095ebec495281c1;p=s9y.git Show category description on mouse over --- diff --git a/docs/NEWS b/docs/NEWS index 13f49ca..9220017 100644 --- a/docs/NEWS +++ b/docs/NEWS @@ -174,6 +174,9 @@ Version 0.8.3 () XML_RPC to 1.3.3 Fixing several bugs and vulnerabilities. (nohn) + * Make categories sidebar plugin show categories' description, not the + name on mouse over (garvinhicking) + * Fix possible exploit that sends comments to the blog owner and others with arbitrary mailheaders and a link to invalid entries. Thanks to Sebastian Raible! (garvinhicking) diff --git a/include/plugin_internal.inc.php b/include/plugin_internal.inc.php index 3f6e2f1..3038406 100644 --- a/include/plugin_internal.inc.php +++ b/include/plugin_internal.inc.php @@ -1201,7 +1201,7 @@ class serendipity_categories_plugin extends serendipity_plugin { if ( !empty($image) ) { $html .= 'XML '; } - $html .= ''. $cat['category_name'] .''; + $html .= ''. htmlspecialchars($cat['category_name']) .''; $html .= '' . "\n"; } }