node title is not escaped

Bodo Maass - November 4, 2008 - 11:30
Project:Export DocBook
Version:5.x-1.x-dev
Component:Code
Category:bug report
Priority:normal
Assigned:Unassigned
Status:closed
Description

In the function export_docbook_node_visitor_pre, the node title is not escaped. If it contains characters that are not legal in XML, the result will be invalid.
To fix this, $node->title needs to be converted with check_plain. Patch is attached.

AttachmentSize
export_docbook.module.patch545 bytes

#1

paul.lovvik - February 10, 2009 - 22:30
Status:needs review» fixed

Committed.

#2

System Message - February 24, 2009 - 22:40
Status:fixed» closed

Automatically closed -- issue fixed for 2 weeks with no activity.

 
 

Drupal is a registered trademark of Dries Buytaert.