diff themes/blocky/entry.template @ 116:cdb525ec06d7

More escaping.
author Steve Kemp <steve@steve.org.uk>
date Thu, 13 Dec 2007 13:57:18 +0000
parents ad6136b094b8
children
line wrap: on
line diff
--- a/themes/blocky/entry.template	Thu Dec 13 13:55:18 2007 +0000
+++ b/themes/blocky/entry.template	Thu Dec 13 13:57:18 2007 +0000
@@ -30,7 +30,7 @@
   <table width="100%">
   <tr><td>
   <!-- tmpl_if name='tags' -->
-  <div class="tags">Tags: <!-- tmpl_loop name='tags' --><a href="<!-- tmpl_var name='top' -->tags/<!-- tmpl_var name='tag' -->"><!-- tmpl_var name='tag' --></a><!-- tmpl_if name="__last__" -->.<!-- tmpl_else -->, <!-- /tmpl_if --><!-- /tmpl_loop --></div>
+  <div class="tags">Tags: <!-- tmpl_loop name='tags' --><a href="<!-- tmpl_var name='top' -->tags/<!-- tmpl_var name='tag' escape='html' -->"><!-- tmpl_var name='tag' escape='html' --></a><!-- tmpl_if name="__last__" -->.<!-- tmpl_else -->, <!-- /tmpl_if --><!-- /tmpl_loop --></div>
    <!-- /tmpl_if -->
   </td><td align="right"><!-- tmpl_var name='date' --></td></tr></table>
  </fieldset>
@@ -59,7 +59,7 @@
 <fieldset>
  <legend>Tags</legend>
  <!-- tmpl_loop name='tagcloud' -->
- <span style="font-size: <!-- tmpl_var name='size' -->px"><a href="<!-- tmpl_var name='top' -->tags/<!-- tmpl_var name='tag' -->"><!-- tmpl_var name='tag' --></a><!-- tmpl_if name="__last__" -->.<!-- tmpl_else -->, <!-- /tmpl_if --></span>
+ <span style="font-size: <!-- tmpl_var name='size' -->px"><a href="<!-- tmpl_var name='top' -->tags/<!-- tmpl_var name='tag' escape='html' -->"><!-- tmpl_var name='tag' escape='html' --></a><!-- tmpl_if name="__last__" -->.<!-- tmpl_else -->, <!-- /tmpl_if --></span>
 <!-- /tmpl_loop -->
 </fieldset>
 <!-- /tmpl_if -->