qbi/additional_plugins
1
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity

try to fix array_map callbacks with htmlspecialchars

Browse source 
added to 8a5bf1c

References s9y/Serendipity#222 and s9y/Serendipity#239
This commit is contained in:
Ian 2014-11-30 16:18:52 +01:00
parent 8a5bf1c181
commit da9167597c
1 changed files with 15 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

18
serendipity_event_freetag/serendipity_event_freetag.php
View file

@ -725,7 +725,11 @@ class serendipity_event_freetag extends serendipity_event
if (false === serendipity_db_bool($this->get_config('show_tagcloud', true))) {
// Since this is extra stuff, we need to regular assign the subtitle header and not use $serendipity['head_subtitle'] !
if (count($param) > 1) {
$serendipity['smarty']->assign('head_subtitle', sprintf(PLUGIN_EVENT_FREETAG_USING, implode(' + ', array_map('htmlspecialchars', $param))));
if (function_exists('serendipity_specialchars')) {
$serendipity['smarty']->assign('head_subtitle', sprintf(PLUGIN_EVENT_FREETAG_USING, implode(' + ', array_map('serendipity_specialchars', $param))));
} else {
$serendipity['smarty']->assign('head_subtitle', sprintf(PLUGIN_EVENT_FREETAG_USING, implode(' + ', array_map('htmlspecialchars', $param))));
}
} else {
$serendipity['smarty']->assign('head_subtitle', sprintf(PLUGIN_EVENT_FREETAG_USING, (function_exists('serendipity_specialchars') ? serendipity_specialchars($param[0]) : htmlspecialchars($param[0], ENT_COMPAT, LANG_CHARSET))));
}
@ -768,7 +772,11 @@ class serendipity_event_freetag extends serendipity_event
}
$param = array_map('strip_tags', $param);
$param = array_filter($param); // empty removed XSS by strip_tags
$serendipity['head_subtitle'] = sprintf(PLUGIN_EVENT_FREETAG_USING, implode(' + ', array_map('htmlspecialchars', $param)));
if (function_exists('serendipity_specialchars')) {
$serendipity['head_subtitle'] = sprintf(PLUGIN_EVENT_FREETAG_USING, implode(' + ', array_map('serendipity_specialchars', $param)));
} else {
$serendipity['head_subtitle'] = sprintf(PLUGIN_EVENT_FREETAG_USING, implode(' + ', array_map('htmlspecialchars', $param)));
}
$emit_404 = true;
}
// for XSS secureness, while using doubled decode
@ -776,7 +784,11 @@ class serendipity_event_freetag extends serendipity_event
if (is_array($param)) {
array_filter($param); // empty removed XSS by strip_tags
}
$param = is_array($param) ? array_map('htmlspecialchars', $param) : (function_exists('serendipity_specialchars') ? serendipity_specialchars($param) : htmlspecialchars($param, ENT_COMPAT, LANG_CHARSET));
if (function_exists('serendipity_specialchars')) {
$param = is_array($param) ? array_map('serendipity_specialchars', $param) : serendipity_specialchars($param);
} else {
$param = is_array($param) ? array_map('htmlspecialchars', $param) : htmlspecialchars($param, ENT_COMPAT, LANG_CHARSET);
}
$this->tags['show'] = $param;
$serendipity['plugin_vars']['tag'] = $param;