SECURITY: avoid XSS vulnerability within the Tags field in BlogEntry

2013-02-07 13:31:08 +13:00 · 2013-02-07 13:31:08 +13:00 · c2a6ba5b69
parent ff439a5ac0
commit c2a6ba5b69
1 changed files with 1 additions and 1 deletions
--- a/code/BlogEntry.php
+++ b/code/BlogEntry.php
@ -100,7 +100,7 @@ class BlogEntry extends Page {
 		$link = $this->getParent() ? $this->getParent()->Link('tag') : '';
 		foreach($tags as $tag) {
 			$output->push(new ArrayData(array(
-				'Tag' => $tag,
+				'Tag' => Convert::raw2xml($tag),
 				'Link' => $link . '/' . urlencode($tag),
 				'URLTag' => urlencode($tag)
 			)));