check that every invocation of htmlspecialchars has the right arg list

2013-12-12 02:01:42 -08:00
parent b3fe221b7f
commit 941f81eb30
8 changed files with 10 additions and 10 deletions
--- a/mod/message.php
+++ b/mod/message.php
@@ -321,7 +321,7 @@ function message_content(&$a) {
 			'$preid' => $preid,
 			'$subject' => t('Subject:'),
 			'$subjtxt' => ((x($_REQUEST,'subject')) ? strip_tags($_REQUEST['subject']) : ''),
-			'$text' => ((x($_REQUEST,'body')) ? escape_tags(htmlspecialchars($_REQUEST['body'])) : ''),
+			'$text' => ((x($_REQUEST,'body')) ? htmlspecialchars($_REQUEST['body'], ENT_COMPAT, 'UTF-8') : ''),
 			'$readonly' => '',
 			'$yourmessage' => t('Your message:'),
 			'$select' => $select,