In invite_notify

-      drupal_set_message(t('!user (@email) has joined @site-name!', array('!user' => theme('username', $account), '@email' => $account->mail, '@site-name' => variable_get('site_name', t('Drupal')))));
+      drupal_set_message(check_plain(t('!user (@email) has joined @site-name!', array('!user' => theme('username', $account), '@email' => $account->mail, '@site-name' => variable_get('site_name', t('Drupal'))))));

From the coder change

It's doesn't need it and messes with the message (@site-name, @email already check_plained, !user is html and should definitely not be check plain-ed)

CommentFileSizeAuthor
#1 incorrect_checkplain-1376578.patch767 bytesgoron

Comments

goron’s picture

goron commented
Status: Active » Needs review
StatusFileSize
new incorrect_checkplain-1376578.patch767 bytes

Here's a patch to fix this

glekli’s picture

glekli commented
Status: Needs review » Fixed

Thanks, looks good to me. Committed.

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.