Issue #1145700 by jbrown, mr.baileys, joachim: harden link display on…

… dblogoverview screen in case the link might be dependent on user input with any contrib module
rjbrown99 · May 1, 2012 · 0c4ad3d · 0c4ad3d
1 parent 4085a4c
commit 0c4ad3d
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/modules/dblog/dblog.admin.inc b/modules/dblog/dblog.admin.inc
@@ -79,7 +79,7 @@ function dblog_overview() {
         format_date($dblog->timestamp, 'small'),
         l(truncate_utf8(_dblog_format_message($dblog), 56, TRUE, TRUE), 'admin/reports/event/'. $dblog->wid, array('html' => TRUE)),
         theme('username', $dblog),
-        $dblog->link,
+        filter_xss($dblog->link),
       ),
       // Attributes for tr
       'class' => "dblog-". preg_replace('/[^a-z]/i', '-', $dblog->type) .' '. $classes[$dblog->severity]