From 6bee39204b737591214ca9f1f12949dfeeac34c6 Mon Sep 17 00:00:00 2001 From: Thomas Lange Date: Thu, 26 Aug 2021 20:42:05 +0200 Subject: Don't use wrapper function "escapeHTML" internally Don't use the template function "escapeHTML" internally and replace all occurrences outside of the template files with "htmlspecialchars". --- core/include/search/main.php | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/core/include/search/main.php b/core/include/search/main.php index 9e7c0a7..de7be9a 100644 --- a/core/include/search/main.php +++ b/core/include/search/main.php @@ -29,7 +29,7 @@ if($search = HTTP::GET('q')) { try { if (!$posts = $PostRepository->search($search, $filter, $site_size, $offset)) { - $message = $Language->text('search_no_results', escapeHTML($search)); + $message = $Language->text('search_no_results', htmlspecialchars($search)); } } catch(PDOException $Exception) { $message = $Exception->getMessage(); @@ -84,7 +84,7 @@ if(!empty($posts)) { $MainTemplate = Template\Factory::build('main'); $MainTemplate->set('HTML', $ResultTemplate); $MainTemplate->set('HEAD', [ - 'NAME' => $Language->text('title_search_results', escapeHTML($search)), + 'NAME' => $Language->text('title_search_results', htmlspecialchars($search)), 'PERM' => Application::getURL('search/') ]); } -- cgit v1.2.3