diff themes/blog.steve.org.uk/entry.template @ 114:54ed5b4c2ad8

Escape tags + links by defaut
author Steve Kemp <steve@steve.org.uk>
date Thu, 13 Dec 2007 13:52:57 +0000
parents 1dc14df6aac1
children 9f092b9be906
line wrap: on
line diff
--- a/themes/blog.steve.org.uk/entry.template	Thu Dec 13 13:29:24 2007 +0000
+++ b/themes/blog.steve.org.uk/entry.template	Thu Dec 13 13:52:57 2007 +0000
@@ -55,7 +55,7 @@
   <div class="date"><!-- tmpl_var name='date' --></div>
   <div class="body"><!-- tmpl_var name='body' --></div>
   <!-- tmpl_if name='tags' -->
-  <div class="tags">Tags: <!-- tmpl_loop name='tags' --><a href="<!-- tmpl_var name='top' -->tags/<!-- tmpl_var name='tag' -->"><!-- tmpl_var name='tag' --></a><!-- tmpl_if name="__last__" -->.<!-- tmpl_else -->, <!-- /tmpl_if --><!-- /tmpl_loop --></div>
+  <div class="tags">Tags: <!-- tmpl_loop name='tags' --><a href="<!-- tmpl_var name='top' -->tags/<!-- tmpl_var name='tag' escape='html' -->"><!-- tmpl_var name='tag' escape='html' --></a><!-- tmpl_if name="__last__" -->.<!-- tmpl_else -->, <!-- /tmpl_if --><!-- /tmpl_loop --></div>
    <!-- /tmpl_if -->
   </div>
 
@@ -70,7 +70,7 @@
 <h2>Tags</h2>
 <ul>
 <!-- tmpl_loop name='tagcloud' -->
- <li><a href="<!-- tmpl_var name='top' -->tags/<!-- tmpl_var name='tag' -->"><!-- tmpl_var name='tag' --> (<!-- tmpl_var name='count' -->)</a></li>
+ <li><a href="<!-- tmpl_var name='top' -->tags/<!-- tmpl_var name='tag' escape='html' -->"><!-- tmpl_var name='tag' escape='html' --> (<!-- tmpl_var name='count' -->)</a></li>
 <!-- /tmpl_loop -->
 </ul>
 <!-- /tmpl_if -->