#194788 - followup : still check_plain output for autocomplete results

diff --git a/nodereference.module b/nodereference.module
index 7f57b92..6dd4b39 100644 (file)
--- a/nodereference.module
+++ b/nodereference.module
@@ -485,7 +485,7 @@ function nodereference_autocomplete($field_name, $string = '') {
   exit();
 }
 
-function _nodereference_item($field, $item, $html = false) {
+function _nodereference_item($field, $item, $html = TRUE) {
   if (module_exists('views') && isset($field['advanced_view']) && $field['advanced_view'] != '--' && ($view = views_get_view($field['advanced_view']))) {
     $output = theme('nodereference_item_advanced', $item, $view);
     if (!$html) {
@@ -496,6 +496,7 @@ function _nodereference_item($field, $item, $html = false) {
   }
   else {
     $output = theme('nodereference_item_simple', $item);
+    $output = $html ? check_plain($output) : $output;
   }
   return $output;
 }