Commit 69afeb92 authored by John C Fiala's avatar John C Fiala
Browse files

security by dropbox: Fixes security vulnerability in Separate Title and URL formatter

parent d098fbf6
......@@ -653,7 +653,7 @@ function link_field_formatter($field, $item, $formatter, $node) {
}
// Build the link using the widget label as separate title.
elseif ($formatter == 'separate') {
$title = _link_field_formatter_title($field, $item, $node);
$title = check_plain(_link_field_formatter_title($field, $item, $node));
$class = empty($field['attributes']['class']) ? '' : ' '. $field['attributes']['class'];
unset($field['attributes']['class']);
......
Supports Markdown
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment