From 65e5296401626cf89a96be83b8af15ee5957abcb Mon Sep 17 00:00:00 2001
From: Dries Buytaert <dries@buytaert.net>
Date: Wed, 9 Dec 2009 15:40:06 +0000
Subject: [PATCH] - Patch #639638 by c960657: missing check_plain() on actions
admin page.
---
modules/system/system.admin.inc | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/modules/system/system.admin.inc b/modules/system/system.admin.inc
index c8c3d01b7bb3..0d0d8a9eefcf 100644
--- a/modules/system/system.admin.inc
+++ b/modules/system/system.admin.inc
@@ -2778,7 +2778,7 @@ function system_actions_manage() {
foreach ($result as $action) {
$row[] = array(
array('data' => $action->type),
- array('data' => $action->label),
+ array('data' => check_plain($action->label)),
array('data' => $action->parameters ? l(t('configure'), "admin/config/system/actions/configure/$action->aid") : ''),
array('data' => $action->parameters ? l(t('delete'), "admin/config/system/actions/delete/$action->aid") : '')
);
--
GitLab