[solved] Non-escaped html code in HTML tags/attributes

[burek]

Hi,

<a href="..." title="poruka "Connection timeout" prilikom transfera">

should be

<a href="..." title="poruka &quot;Connection timeout&quot; prilikom transfera">

I'm not sure where this should be changed, but I got these errors when validating my website after installing JComments.

Great work, btw

EDIT:

Code:

<div class="article-content">
...<div class="jcomments-links"><a class="readmore-link" href="/poruka-connection-timeout-prilikom-transfera.html" title="poruka "Connection timeout" prilikom transfera">Opsirnije...</a> <a href="/poruka-connection-timeout-prilikom-transfera.html#addcomments" class="comment-link">Dodaj novi komentar</a></div>
</div>

[smart]

Yes, you're right!

Open /components/com_jcomments/tpl/default/tpl_links.php and replace:

Code: (php)

$title = $this->getVar('link-readmore-title');

with

Code: (php)

$title = htmlspecialchars($this->getVar('link-readmore-title'));