From 58a069dee589dd1e3e4d219a99170d862b720fb1 Mon Sep 17 00:00:00 2001
From: garvinhicking <garvinhicking>
Date: Thu, 30 Mar 2006 10:37:43 +0000
Subject: [PATCH] use htmlspecialchars()

---
 include/admin/entries.inc.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/include/admin/entries.inc.php b/include/admin/entries.inc.php
index 18ae237..c7fe843 100644
--- a/include/admin/entries.inc.php
+++ b/include/admin/entries.inc.php
@@ -231,7 +231,7 @@ function serendipity_drawList() {
                 <table width="100%" cellspacing="0" cellpadding="3">
                     <tr>
                         <td>
-                            <strong><?php echo $entry_pre; ?><a href="?serendipity[action]=admin&amp;serendipity[adminModule]=entries&amp;serendipity[adminAction]=edit&amp;serendipity[id]=<?php echo $entry['id']; ?>" title="#<?php echo $entry['id']; ?>"><?php echo serendipity_truncateString($entry['title'],50) ?></a></strong>
+                            <strong><?php echo $entry_pre; ?><a href="?serendipity[action]=admin&amp;serendipity[adminModule]=entries&amp;serendipity[adminAction]=edit&amp;serendipity[id]=<?php echo $entry['id']; ?>" title="#<?php echo $entry['id']; ?>"><?php echo serendipity_truncateString(htmlspecialchars($entry['title']),50) ?></a></strong>
                         </td>
                         <td align="right">
                             <?php echo serendipity_formatTime(DATE_FORMAT_SHORT, $entry['timestamp']) . ' ' .$lm; ?>
-- 
2.39.5