Changeset 2052 for branches/1.1/bp-activity/bp-activity-templatetags.php

Timestamp:

10/22/2009 05:06:04 PM (17 years ago)

Author:

apeatling

Message:

Fixes #1223 props DJPaul

File:

• branches/1.1/bp-activity/bp-activity-templatetags.php (modified) (3 diffs)

branches/1.1/bp-activity/bp-activity-templatetags.php

@@ -352 +352 @@
                         else
                                 unset($selected);
+                        
+                        $component_name = attribute_escape( $component_name );
 
                         switch ( $style ) {
@@ -379 +381 @@
                         $translatable_component_names = array( __( 'profile', 'buddypress'), __( 'friends', 'buddypress' ), __( 'groups', 'buddypress' ), __( 'status', 'buddypress' ), __( 'blogs', 'buddypress' ) );
                         
-                        $component_links[] = $before . '<a href="' . $link . '">' . ucwords( __( $component_name, 'buddypress' ) ) . '</a>' . $after;
+                        $component_links[] = $before . '<a href="' . attribute_escape( $link ) . '">' . ucwords( __( $component_name, 'buddypress' ) ) . '</a>' . $after;
                 }
 
@@ -385 +387 @@
 
                 if ( isset( $_GET['afilter'] ) )
-                        $component_links[] = '<' . $tag . ' id="afilter-clear"><a href="' . $link . '"">' . __( 'Clear Filter', 'buddypress' ) . '</a></' . $tag . '>';
+                        $component_links[] = '<' . $tag . ' id="afilter-clear"><a href="' . attribute_escape( $link ) . '"">' . __( 'Clear Filter', 'buddypress' ) . '</a></' . $tag . '>';
                 
                 return apply_filters( 'bp_get_activity_filter_links', implode( "\n", $component_links ) );