Index: includes/theme.inc
===================================================================
RCS file: /cvs/drupal/drupal/includes/theme.inc,v
retrieving revision 1.415.2.2
diff -u -p -r1.415.2.2 theme.inc
--- includes/theme.inc 25 Mar 2008 11:55:08 -0000 1.415.2.2
+++ includes/theme.inc 19 Apr 2008 03:52:59 -0000
@@ -1745,7 +1745,7 @@ function template_preprocess_page(&$vari
$head_title[] = variable_get('site_slogan', '');
}
}
- $variables['head_title'] = implode(' | ', $head_title);
+ $variables['head_title'] = check_plain(implode(' | ', $head_title));
$variables['base_path'] = base_path();
$variables['front_page'] = url();
$variables['breadcrumb'] = theme('breadcrumb', drupal_get_breadcrumb());
Index: includes/theme.maintenance.inc
===================================================================
RCS file: /cvs/drupal/drupal/includes/theme.maintenance.inc,v
retrieving revision 1.10
diff -u -p -r1.10 theme.maintenance.inc
--- includes/theme.maintenance.inc 24 Jan 2008 09:42:50 -0000 1.10
+++ includes/theme.maintenance.inc 19 Apr 2008 03:52:59 -0000
@@ -239,7 +239,7 @@ function template_preprocess_maintenance
$head_title[] = variable_get('site_slogan', '');
}
}
- $variables['head_title'] = implode(' | ', $head_title);
+ $variables['head_title'] = check_plain(implode(' | ', $head_title));
$variables['base_path'] = base_path();
$variables['breadcrumb'] = '';
$variables['feed_icons'] = '';
Index: themes/chameleon/chameleon.theme
===================================================================
RCS file: /cvs/drupal/drupal/themes/chameleon/chameleon.theme,v
retrieving revision 1.76
diff -u -p -r1.76 chameleon.theme
--- themes/chameleon/chameleon.theme 24 Jan 2008 09:42:53 -0000 1.76
+++ themes/chameleon/chameleon.theme 19 Apr 2008 03:52:59 -0000
@@ -30,7 +30,7 @@ function chameleon_page($content, $show_
$output = "\n";
$output .= "\n";
$output .= "\n";
- $output .= " ". ($title ? strip_tags($title) ." | ". variable_get("site_name", "Drupal") : variable_get("site_name", "Drupal") ." | ". variable_get("site_slogan", "")) ."\n";
+ $output .= " ". check_plain($title ? strip_tags($title) ." | ". variable_get("site_name", "Drupal") : variable_get("site_name", "Drupal") ." | ". variable_get("site_slogan", "")) ."\n";
$output .= drupal_get_html_head();
$output .= drupal_get_css();
$output .= drupal_get_js();