Issue #14 : XSS fix

This commit is contained in:
Edoardo Vacchi 2014-03-06 10:00:57 +01:00
parent 109664842b
commit 924668fe2c

View File

@ -33,6 +33,7 @@
<label class="textlabel" for="url">{$lang.comments.www}</label> <label class="textlabel" for="url">{$lang.comments.www}</label>
</p> </p>
{* do action *}
{comment_form} {comment_form}
</div> </div>
@ -42,7 +43,7 @@
<div class="comment-content"> <div class="comment-content">
<p><textarea name="content" {$error.content|notempty:'class="field-error"'} <p><textarea name="content" {$error.content|notempty:'class="field-error"'}
id="content" rows="10" cols="74">{$values.content}</textarea></p> id="content" rows="10" cols="74">{$values.content|wp_specialchars:1}</textarea></p>
{*here will go a plugin hook*} {*here will go a plugin hook*}
</div> </div>