Fix peej#76

macik · macik · commit 198be2f96598 · 2016-06-29T22:16:27.000+03:00
Converts HTML entities in sources to safe display
diff --git a/doclets/standard/sourceWriter.php b/doclets/standard/sourceWriter.php
@@ -90,7 +90,7 @@ public function sourceWriter(&$doclet)
                 $geshi = new GeSHi($data[0], 'php');
                 $source = $geshi->parse_code();
             } else {
-                $source = '<pre>'.$data[0].'</pre>';
+                $source = '<pre>'.htmlspecialchars($data[0]).'</pre>';
             }
 
             ob_start();

Original file line number	Diff line number	Diff line change
`@@ -90,7 +90,7 @@ public function sourceWriter(&$doclet)`
`90`	`90`	`$geshi = new GeSHi($data[0], 'php');`
`91`	`91`	`$source = $geshi->parse_code();`
`92`	`92`	`} else {`
`93`		`- $source = '<pre>'.$data[0].'</pre>';`
	`93`	`+ $source = '<pre>'.htmlspecialchars($data[0]).'</pre>';`
`94`	`94`	`}`
`95`	`95`
`96`	`96`	`ob_start();`