In the install file, you create messages containing a clickable url:
Example:

  46     $message = t('You already have the FitVids.js jQuery plugin installed. Configure the module !fitvids-configuration', array(
  47       '!fitvids-configuration' => l(t('here'), 'admin/config/media/fitvids'),
  48     ));

After generating the message with the clickable url, you run it through check_plain? I think thats an error?
49 drupal_set_message(check_plain($message));

Comments

derekahmedzai’s picture

derekahmedzai commented

Thanks, will fix that.

moloc’s picture

moloc commented

As reading the issue again, i think instead of removing the check_plain check, a better solution may be to use filter_xss_admin?

derekahmedzai’s picture

derekahmedzai commented
Status: Active » Closed (fixed)

Am using filter_xss_admin in the latest release.