From 5cf6485105906850257afa3a804da62c126ff812 Mon Sep 17 00:00:00 2001 From: solotandem Date: Mon, 12 Sep 2011 14:02:27 -0500 Subject: [PATCH] #1276740: Output the description column in data selector help and replacement patterns fieldsets using filter_xss_admin(). --- modules/system.eval.inc | 2 +- ui/ui.theme.inc | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/modules/system.eval.inc b/modules/system.eval.inc index 7af619e..c341677 100644 --- a/modules/system.eval.inc +++ b/modules/system.eval.inc @@ -210,7 +210,7 @@ class RulesTokenEvaluator extends RulesDataInputEvaluator { ); foreach ($token_info['tokens'][$token_type] as $token => $info) { $token = '[' . str_replace('_', '-', $name) . ':' . $token . ']'; - $render[$name]['#rows'][$token] = array(check_plain($token), check_plain($info['name']), check_plain($info['description'])); + $render[$name]['#rows'][$token] = array(check_plain($token), check_plain($info['name']), filter_xss_admin($info['description'])); } } } diff --git a/ui/ui.theme.inc b/ui/ui.theme.inc index db58c1c..b5ac7ed 100755 --- a/ui/ui.theme.inc +++ b/ui/ui.theme.inc @@ -193,7 +193,7 @@ function theme_rules_data_selector_help($variables) { ); foreach (RulesData::matchingDataSelector($variables_info, $param_info) as $selector => $info) { $info += array('label' => '', 'description' => ''); - $render['table']['#rows'][] = array(check_plain($selector), check_plain(drupal_ucfirst($info['label'])), check_plain($info['description'])); + $render['table']['#rows'][] = array(check_plain($selector), check_plain(drupal_ucfirst($info['label'])), filter_xss_admin($info['description'])); } return drupal_render($render); } -- 1.7.6.1