fix another xss

SoylentNews · Jun 17, 2015 · 8fcdbff · 8fcdbff
1 parent eed6176
commit 8fcdbff
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/themes/default/templates/listComments;users;default b/themes/default/templates/listComments;users;default
@@ -132,7 +132,7 @@ row_class_3 = "data_hl3";
 				'/comments.pl?sid='; comment.sid;
 				'&amp;cid='; comment.cid;
 			'">';
-			comment.subj;
+			comment.subj | strip_title;
 			'</a>&nbsp;';
 		'</td>';
 		'<td valign="top"><nobr>&nbsp;'; IF comment.type == "archived"; "*"; END; Slash.timeCalc(comment.cdate); '</nobr></td>';