variable_get('anonymous') returns plaintext so it should be check_plained in theme_username.

CommentFileSizeAuthor
#2 do-465190-anonymous_is_plaintext_0.patch539 bytesheine
do-xxxx-anonymous_is_plaintext.patch862 bytesheine

Comments

Status: Needs review » Needs work

The last submitted patch failed testing.

heine’s picture

heine commented
Status: Needs work » Needs review
StatusFileSize
new do-465190-anonymous_is_plaintext_0.patch539 bytes

*thumbleweed*

damien tournoud’s picture

damien tournoud commented
Status: Needs review » Reviewed & tested by the community
Issue tags: +Needs backport to D6, +Needs backport to D5

Makes complete sense. This is a candidate to backport.

dries’s picture

dries commented
Version: 7.x-dev » 6.x-dev

Committed to CVS HEAD. Updating version number.

gábor hojtsy’s picture

gábor hojtsy
he/him
Primary language Hungarian
Location Hungary
commented
Status: Reviewed & tested by the community » Fixed

Applied to D6 with fuzz. Committed, thanks.

Status: Fixed » Closed (fixed)
Issue tags: -Needs backport to D6, -Needs backport to D5

Automatically closed -- issue fixed for 2 weeks with no activity.

Issue tags: +Needs backport to D6, +Needs backport to D5

Restoring issue tags, see #2125755: System messages removed all issue tags during D7 upgrade.