From 5aaa1f4186e209d0b2a60b445095ebec495281c1 Mon Sep 17 00:00:00 2001 From: garvinhicking Date: Tue, 26 Jul 2005 19:30:15 +0000 Subject: [PATCH] Show category description on mouse over --- docs/NEWS | 3 +++ include/plugin_internal.inc.php | 2 +- 2 files changed, 4 insertions(+), 1 deletion(-) diff --git a/docs/NEWS b/docs/NEWS index 13f49ca..9220017 100644 --- a/docs/NEWS +++ b/docs/NEWS @@ -174,6 +174,9 @@ Version 0.8.3 () XML_RPC to 1.3.3 Fixing several bugs and vulnerabilities. (nohn) + * Make categories sidebar plugin show categories' description, not the + name on mouse over (garvinhicking) + * Fix possible exploit that sends comments to the blog owner and others with arbitrary mailheaders and a link to invalid entries. Thanks to Sebastian Raible! (garvinhicking) diff --git a/include/plugin_internal.inc.php b/include/plugin_internal.inc.php index 3f6e2f1..3038406 100644 --- a/include/plugin_internal.inc.php +++ b/include/plugin_internal.inc.php @@ -1201,7 +1201,7 @@ class serendipity_categories_plugin extends serendipity_plugin { if ( !empty($image) ) { $html .= 'XML '; } - $html .= ''. $cat['category_name'] .''; + $html .= ''. htmlspecialchars($cat['category_name']) .''; $html .= '' . "\n"; } } -- 2.39.5