Index: forward.module
===================================================================
--- forward.module	(revisione 768)
+++ forward.module	(copia locale)
@@ -444,7 +444,7 @@
   else {
     foreach ($recipient_addresses as $address) {
       if ((user_validate_mail($address)) && ($address != '')) {
-        form_set_error('recipients', t('One of your Recipient addresses is invalid:') .'<br />'. $address);
+        form_set_error('recipients', t('One of your Recipient addresses is invalid:') .'<br />'. check_plain($address));
       }
     }
   }
@@ -504,7 +504,7 @@
     'site_name' => variable_get('site_name', 'Drupal'),
     'yemail' => $edit['yemail'],
     'forward_message' => t(variable_get('forward_'. $emailtype .'message', '!name thought you would like to see the !site web site.'), array('!name' => l($edit['yname'], 'mailto:'. $edit['yemail'], null, null, null, true), '!site' => variable_get('site_name', 'drupal'))),
-    'message' => $edit['message'],
+    'message' => check_plain($edit['message']),
     'base_url' => $base_url,
     'content' => $content,
     'dynamic_content' => $dynamic_content,
@@ -714,4 +714,4 @@
 
 function _forward_column_width($column, $width = 35) {
   return (strlen($column) > $width ? substr($column, 0, $width) .'...' : $column);
-}
\ Nessun a-capo alla fine del file
+}