rss_widget의 제목 출력시 htmlspecialchars를 추가하여 html표시가 제대로 되지 않는 문제 해결

git-svn-id: http://xe-core.googlecode.com/svn/sandbox@4099 201d5d3c-b55e-5fd7-737f-ddc643e51545

widgets/rss_reader/skins/sz_select/list.html

@@ -12,7 +12,7 @@
         {@$i=1}
         <select onchange="tab_menu_select({$tab_id}, {count($widget_info->rss_list)}, this.value, this);resize_rss_tabcontent('tab{$tab_id}',{$widget_info->rss_height})">
         <!--@foreach($widget_info->rss_list as $key => $item)-->
-        <option value="{$i}">{$item->title}</option>
+        <option value="{$i}">{htmlspecialchars($item->title)}</option>
         {@$i++}
         <!--@end-->
         </select>

widgets/rss_reader/skins/sz_xe/list.html

@@ -9,7 +9,7 @@
         <!--@foreach($widget_info->rss_list as $key => $item)-->
         <li title="{strip_tags($item->description)}">
             <span class="date">{$item->date}</span>
-            <span class="title"><a href="{$item->link}" onclick="window.open(this.href);return false">{$item->title}</a></span>
+            <span class="title"><a href="{$item->link}" onclick="window.open(this.href);return false">{htmlspecialchars($item->title)}</a></span>
         </li>
         <!--@end-->
     </ul>

widgets/rss_reader/skins/xe_official/list.html

@@ -13,7 +13,7 @@
         <!--@foreach($widget_info->rss_list as $key => $item)-->
         <li>
           <span class="date">{$item->date}</span>
-          <span class="title"><a href="{$item->link}" onclick="window.open(this.href);return false">{$item->title}</a></span>
+          <span class="title"><a href="{$item->link}" onclick="window.open(this.href);return false">{htmlspecialchars($item->title)}</a></span>
         </li>
         <!--@end-->
     </ul>

widgets/rss_reader/skins/xe_select/list.html

@@ -11,7 +11,7 @@
         {@$i=1}
         <select onchange="tab_menu_select({$tab_id}, {count($widget_info->rss_list)}, this.value, this);resize_rss_tabcontent('tab{$tab_id}',{$widget_info->rss_height})">
         <!--@foreach($widget_info->rss_list as $key => $item)-->
-        <option value="{$i}">{$item->title}</option>
+        <option value="{$i}">{htmlspecialchars($item->title)}</option>
         {@$i++}
         <!--@end-->
         </select>