From 24dfd1d9ec8ec520bc36b67f5af28a22c285cc85 Mon Sep 17 00:00:00 2001 From: Joao Ventura Date: Wed, 15 Apr 2009 19:52:05 +0000 Subject: [PATCH] Filter node titles using check_plain --- print.pages.inc | 4 ++-- 1 files changed, 2 insertions(+), 2 deletions(-) diff --git a/print.pages.inc b/print.pages.inc index 0fdb84c..bd2fc60 100644 --- a/print.pages.inc +++ b/print.pages.inc @@ -163,7 +163,7 @@ function _print_var_generator($node, $message = NULL, $cid = NULL) { $print_footer_user = variable_get('print_footer_user', PRINT_FOOTER_USER_DEFAULT); $print['language'] = $GLOBALS['locale']; - $print['title'] = $node->title; + $print['title'] = check_plain($node->title); $print['head'] = drupal_get_html_head(); $print['scripts'] = drupal_get_js(); $print['robots_meta'] = _print_robots_meta_generator(); @@ -551,7 +551,7 @@ function _print_generate_node($nid, $cid = NULL, $format = PRINT_HTML_FORMAT, $t drupal_access_denied(); return FALSE; } - drupal_set_title($node->title); + drupal_set_title(check_plain($node->title)); //alert other modules that we are generating a printer-friendly page, so they can choose to show/hide info $node->printing = TRUE; -- 1.7.4.1