Fix #12309: XSS issues when viewing Summary page

Signed-off-by: David Hicks <hickseydr@optusnet.com.au>
mantisbt · Sep 2, 2010 · 61e90d0 · 61e90d0
1 parent 41075e5
commit 61e90d0
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/core/summary_api.php b/core/summary_api.php
@@ -358,7 +358,7 @@ function summary_print_by_activity() {
 
 	foreach( $t_summarydata as $row ) {
 		$t_bugid = string_get_bug_view_link( $row['id'] );
-		$t_summary = string_html_specialchars( $row['summary'] );
+		$t_summary = string_display_line( $row['summary'] );
 		$t_notescount = $row['count'];
 
 		print "<tr " . helper_alternate_class() . ">\n";
@@ -402,7 +402,7 @@ function summary_print_by_age() {
 		}
 
 		$t_bugid = string_get_bug_view_link( $row['id'] );
-		$t_summary = $row['summary'];
+		$t_summary = string_display_line( $row['summary'] );
 		$t_days_open = intval(( time() - $row['date_submitted'] ) / SECONDS_PER_DAY );
 
 		print "<tr " . helper_alternate_class() . ">\n";