This module, in its template creation page (admin/content/templates/content_type), has a warning section about the fields: "Click property to add to your template. Fields marked with ** are insecure and need to be wrapped with either check_plain() or check_markup()"

The links for check_plain and check_markup should be changed to http://api.drupal.org/api/function/check_plain/6 and http://api.drupal.org/api/function/check_markup/6 ("/6" is put on the end for forwards compatibility, when Drupal 7 becomes the main one).

Comments

JoshOrndorff’s picture

This is still true in the drupal seven version.

jrglasgow’s picture

Status: Active » Fixed

fixed

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.