Changeset 2055 for trunk/bp-activity/bp-activity-templatetags.php

Timestamp:

10/26/2009 05:31:43 PM (15 years ago)

Author:

apeatling

Message:

Merging 1.1 branch with trunk

File:

• trunk/bp-activity/bp-activity-templatetags.php (modified) (3 diffs)

trunk/bp-activity/bp-activity-templatetags.php

@@ -352 +352 @@
             else
                 unset($selected);
+            
+            $component_name = attribute_escape( $component_name );
 
             switch ( $style ) {
@@ -379 +381 @@
             $translatable_component_names = array( __( 'profile', 'buddypress'), __( 'friends', 'buddypress' ), __( 'groups', 'buddypress' ), __( 'status', 'buddypress' ), __( 'blogs', 'buddypress' ) );
             
-            $component_links[] = $before . '<a href="' . $link . '">' . ucwords( __( $component_name, 'buddypress' ) ) . '</a>' . $after;
+            $component_links[] = $before . '<a href="' . attribute_escape( $link ) . '">' . ucwords( __( $component_name, 'buddypress' ) ) . '</a>' . $after;
         }
 
@@ -385 +387 @@
 
         if ( isset( $_GET['afilter'] ) )
-            $component_links[] = '<' . $tag . ' id="afilter-clear"><a href="' . $link . '"">' . __( 'Clear Filter', 'buddypress' ) . '</a></' . $tag . '>';
+            $component_links[] = '<' . $tag . ' id="afilter-clear"><a href="' . attribute_escape( $link ) . '"">' . __( 'Clear Filter', 'buddypress' ) . '</a></' . $tag . '>';
         
         return apply_filters( 'bp_get_activity_filter_links', implode( "\n", $component_links ) );