Index: includes/theme.inc
===================================================================
RCS file: /cvs/drupal/drupal/includes/theme.inc,v
retrieving revision 1.420
diff -u -p -r1.420 theme.inc
--- includes/theme.inc 14 Apr 2008 17:48:33 -0000 1.420
+++ includes/theme.inc 19 Apr 2008 03:40:16 -0000
@@ -1745,7 +1745,7 @@ function template_preprocess_page(&$vari
$head_title[] = variable_get('site_slogan', '');
}
}
- $variables['head_title'] = implode(' | ', $head_title);
+ $variables['head_title'] = check_plain(implode(' | ', $head_title));
$variables['base_path'] = base_path();
$variables['front_page'] = url();
$variables['breadcrumb'] = theme('breadcrumb', drupal_get_breadcrumb());
Index: includes/theme.maintenance.inc
===================================================================
RCS file: /cvs/drupal/drupal/includes/theme.maintenance.inc,v
retrieving revision 1.12
diff -u -p -r1.12 theme.maintenance.inc
--- includes/theme.maintenance.inc 14 Apr 2008 17:48:33 -0000 1.12
+++ includes/theme.maintenance.inc 19 Apr 2008 03:40:16 -0000
@@ -239,7 +239,7 @@ function template_preprocess_maintenance
$head_title[] = variable_get('site_slogan', '');
}
}
- $variables['head_title'] = implode(' | ', $head_title);
+ $variables['head_title'] = check_plain(implode(' | ', $head_title));
$variables['base_path'] = base_path();
$variables['breadcrumb'] = '';
$variables['feed_icons'] = '';
Index: themes/chameleon/chameleon.theme
===================================================================
RCS file: /cvs/drupal/drupal/themes/chameleon/chameleon.theme,v
retrieving revision 1.77
diff -u -p -r1.77 chameleon.theme
--- themes/chameleon/chameleon.theme 14 Apr 2008 17:48:44 -0000 1.77
+++ themes/chameleon/chameleon.theme 19 Apr 2008 03:40:16 -0000
@@ -30,7 +30,7 @@ function chameleon_page($content, $show_
$output = "\n";
$output .= "\n";
$output .= "\n";
- $output .= " " . ($title ? strip_tags($title) . " | " . variable_get("site_name", "Drupal") : variable_get("site_name", "Drupal") . " | " . variable_get("site_slogan", "")) . "\n";
+ $output .= " " . check_plain($title ? strip_tags($title) . " | " . variable_get("site_name", "Drupal") : variable_get("site_name", "Drupal") . " | " . variable_get("site_slogan", "")) . "\n";
$output .= drupal_get_html_head();
$output .= drupal_get_css();
$output .= drupal_get_js();