From d180de224e9fc3c3a8e4647204520d1eaffb0fb4 Mon Sep 17 00:00:00 2001
From: =?utf8?q?Bar=C4=B1=C5=9F=20Metin?= <Talip-Baris.Metin@sophia.inria.fr>
Date: Thu, 10 Jun 2010 18:09:53 +0200
Subject: [PATCH] encode special chars

---
 plekit/php/linetabs.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/plekit/php/linetabs.php b/plekit/php/linetabs.php
index ce5e808..d2be029 100644
--- a/plekit/php/linetabs.php
+++ b/plekit/php/linetabs.php
@@ -95,10 +95,10 @@ function plekit_linetabs ($tabs, $id=NULL) {
     } else {
       $type="type='button' value='$label'";
     }
-    $bubble=$todo['bubble'];
+    $bubble=htmlspecialchars($todo['bubble'], ENT_QUOTES);
     print "<span title='$bubble'>";
     $message="";
-    if ($todo['confirm']) $message=$todo['confirm'] . " ?";
+    if ($todo['confirm']) $message=htmlspecialchars($todo['confirm'], ENT_QUOTES) . " ?";
     print "<input $tracer $type onclick='linetabs_namespace.submit(\"$id\",\"$message\")' />";
     print "</span>";
     print "</fieldset></form></li>\n";
-- 
2.47.0