Hello,
I have detected that some user submitted strings where being inserted into locales_source table.
Upon investigation I have found (using debug_backtrace() in the function locale), I have found that this module is the culprit. Look at the following lines:
...
1491 $children_box .= l(t($child_node->title), 'node/'.$child_node->nid, array('class' => 'relativity_view_' . $childtype)) . "<br />\n";
...
1639 $output .= node_get_types('name',$ancestor->type) . ': ' . l(t($ancestor->title), 'node/'.$ancestor-> nid, array('class' => 'relativity_view_' . $type));
(maybe there are more places in the .module...)
Is this a bug? I guess it is.
Comments
Comment #1
yonailoComment #2
janusman commentedPatch included
Comment #3
janusman commentedSorry, missed one t().. and this is for 5.x-2.3
Comment #4
dawehnerPatch works fine on DRUPAL5 version.
Here is a patch which applies clean to drupal5.
Set to "rtbc" for DRUPAL-5 Version.
Comment #5
tacituseu commentedYou meant D6 ? it's already fixed in D5. And it should use check_plain().
Comment #6
jonhattanCommitted a fix.