Added additional check to thwart xss attacks. Issue 88065. Thanks fago!

diff --git a/link.module b/link.module
index 6a991b0..e57a7de 100644 (file)
--- a/link.module
+++ b/link.module
@@ -373,7 +373,7 @@ function link_cleanup_url ($url, $protocol = "http") {
     }
   }
   
-  return $url;
+  return check_url($url);
 }
 
 /**