From 1c65ca492295e754dfd9986f91b08eb0876d09b9 Mon Sep 17 00:00:00 2001
From: joey <joey@0fa5a96a-9a0e-0410-b3b2-a0fd24251071>
Date: Wed, 21 Mar 2007 06:05:21 +0000
Subject: * Fix a few bugs around page titles containing html. The worst of
 these   is an actual security hole as it allows insertion of html into the
 title   element of a page, which is not processed by the htmlscrubber.

---
 templates/titlepage.tmpl | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'templates/titlepage.tmpl')

diff --git a/templates/titlepage.tmpl b/templates/titlepage.tmpl
index f5cd5bc53..0676a098e 100644
--- a/templates/titlepage.tmpl
+++ b/templates/titlepage.tmpl
@@ -1 +1 @@
-<p><a href="<TMPL_VAR PAGEURL>"><TMPL_VAR TITLE></a></p>
+<p><a href="<TMPL_VAR PAGEURL>"><TMPL_VAR TITLE ESCAPE=HTML></a></p>
-- 
cgit v1.2.3