diff --git a/modules/comment/comment.item.php b/modules/comment/comment.item.php
index d08369569..d66b15181 100644
--- a/modules/comment/comment.item.php
+++ b/modules/comment/comment.item.php
@@ -320,6 +320,33 @@ class commentItem extends Object
return $_SESSION['voted_comment'][$this->comment_srl] = false;
}
+ function getContentPlainText($strlen = 0)
+ {
+ if($this->isDeletedByAdmin())
+ {
+ $content = lang('msg_admin_deleted_comment');
+ }
+ elseif($this->isDeleted())
+ {
+ $content = lang('msg_deleted_comment');
+ }
+ elseif($this->isSecret() && !$this->isAccessible())
+ {
+ $content = lang('msg_is_secret');
+ }
+ else
+ {
+ $content = $this->get('content');
+ }
+
+ $content = trim(utf8_normalize_spaces(html_entity_decode(strip_tags($content))));
+ if($strlen)
+ {
+ $content = cut_str($content, $strlen, '...');
+ }
+ return escape($content);
+ }
+
/**
* Return content with htmlspecialchars
* @return string
@@ -345,10 +372,10 @@ class commentItem extends Object
if($strlen)
{
- return cut_str(trim(strip_tags($content)), $strlen, '...');
+ $content = trim(utf8_normalize_spaces(html_entity_decode(strip_tags($content))));
+ $content = cut_str($content, $strlen, '...');
}
-
- return htmlspecialchars($content, ENT_COMPAT | ENT_HTML401, 'UTF-8', false);
+ return escape($content);
}
/**
diff --git a/modules/document/document.item.php b/modules/document/document.item.php
index 9e93e4fc2..b5359c132 100644
--- a/modules/document/document.item.php
+++ b/modules/document/document.item.php
@@ -142,7 +142,7 @@ class documentItem extends Object
if($this->get('tags'))
{
$tag_list = explode(',', $this->get('tags'));
- $tag_list = array_map('trim', $tag_list);
+ $tag_list = array_map('utf8_trim', $tag_list);
$this->add('tag_list', $tag_list);
}
@@ -484,8 +484,34 @@ class documentItem extends Object
if($this->get('title_bold')=='Y') $attrs[] = "font-weight:bold;";
if($this->get('title_color') && $this->get('title_color') != 'N') $attrs[] = "color:#".$this->get('title_color');
- if(count($attrs)) return sprintf("%s", implode(';',$attrs), htmlspecialchars($title, ENT_COMPAT | ENT_HTML401, 'UTF-8', false));
- else return htmlspecialchars($title, ENT_COMPAT | ENT_HTML401, 'UTF-8', false);
+ if(count($attrs))
+ {
+ return sprintf("%s", implode(';', $attrs), escape($title, false));
+ }
+ else
+ {
+ return escape($title, false);
+ }
+ }
+
+ function getContentPlainText($strlen = 0)
+ {
+ if(!$this->document_srl) return;
+ if($this->isSecret() && !$this->isGranted() && !$this->isAccessible()) return lang('msg_is_secret');
+
+ $result = $this->_checkAccessibleFromStatus();
+ if($result && Context::getSessionStatus())
+ {
+ $this->setAccessible();
+ }
+
+ $content = $this->get('content');
+ $content = trim(utf8_normalize_spaces(html_entity_decode(strip_tags($content))));
+ if($strlen)
+ {
+ $content = cut_str($content, $strlen, '...');
+ }
+ return escape($content);
}
function getContentText($strlen = 0)
@@ -504,9 +530,12 @@ class documentItem extends Object
$content = preg_replace_callback('/<(object|param|embed)[^>]*/is', array($this, '_checkAllowScriptAccess'), $content);
$content = preg_replace_callback('/