From 71856d73131c883311bfd52b130e3169f62cc998 Mon Sep 17 00:00:00 2001
From: zero <skklove@gmail.com>
Date: Fri, 11 Apr 2008 02:37:08 +0000
Subject: [PATCH] =?UTF-8?q?rss=5Fwidget=EC=9D=98=20=EC=A0=9C=EB=AA=A9=20?=
 =?UTF-8?q?=EC=B6=9C=EB=A0=A5=EC=8B=9C=20htmlspecialchars=EB=A5=BC=20?=
 =?UTF-8?q?=EC=B6=94=EA=B0=80=ED=95=98=EC=97=AC=20html=ED=91=9C=EC=8B=9C?=
 =?UTF-8?q?=EA=B0=80=20=EC=A0=9C=EB=8C=80=EB=A1=9C=20=EB=90=98=EC=A7=80=20?=
 =?UTF-8?q?=EC=95=8A=EB=8A=94=20=EB=AC=B8=EC=A0=9C=20=ED=95=B4=EA=B2=B0?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

git-svn-id: http://xe-core.googlecode.com/svn/sandbox@4099 201d5d3c-b55e-5fd7-737f-ddc643e51545
---
 widgets/rss_reader/skins/sz_select/list.html   | 2 +-
 widgets/rss_reader/skins/sz_xe/list.html       | 2 +-
 widgets/rss_reader/skins/xe_official/list.html | 2 +-
 widgets/rss_reader/skins/xe_select/list.html   | 2 +-
 4 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/widgets/rss_reader/skins/sz_select/list.html b/widgets/rss_reader/skins/sz_select/list.html
index 258c467bc..2160a7e18 100644
--- a/widgets/rss_reader/skins/sz_select/list.html
+++ b/widgets/rss_reader/skins/sz_select/list.html
@@ -12,7 +12,7 @@
         {@$i=1}
         <select onchange="tab_menu_select({$tab_id}, {count($widget_info->rss_list)}, this.value, this);resize_rss_tabcontent('tab{$tab_id}',{$widget_info->rss_height})">
         <!--@foreach($widget_info->rss_list as $key => $item)-->
-        <option value="{$i}">{$item->title}</option>
+        <option value="{$i}">{htmlspecialchars($item->title)}</option>
         {@$i++}
         <!--@end-->
         </select>
diff --git a/widgets/rss_reader/skins/sz_xe/list.html b/widgets/rss_reader/skins/sz_xe/list.html
index a500f6a2b..0404d3b52 100644
--- a/widgets/rss_reader/skins/sz_xe/list.html
+++ b/widgets/rss_reader/skins/sz_xe/list.html
@@ -9,7 +9,7 @@
         <!--@foreach($widget_info->rss_list as $key => $item)-->
         <li title="{strip_tags($item->description)}">
             <span class="date">{$item->date}</span>
-            <span class="title"><a href="{$item->link}" onclick="window.open(this.href);return false">{$item->title}</a></span>
+            <span class="title"><a href="{$item->link}" onclick="window.open(this.href);return false">{htmlspecialchars($item->title)}</a></span>
         </li>
         <!--@end-->
     </ul>
diff --git a/widgets/rss_reader/skins/xe_official/list.html b/widgets/rss_reader/skins/xe_official/list.html
index f210cb3af..7b1236858 100644
--- a/widgets/rss_reader/skins/xe_official/list.html
+++ b/widgets/rss_reader/skins/xe_official/list.html
@@ -13,7 +13,7 @@
         <!--@foreach($widget_info->rss_list as $key => $item)-->
         <li>
           <span class="date">{$item->date}</span>
-          <span class="title"><a href="{$item->link}" onclick="window.open(this.href);return false">{$item->title}</a></span>
+          <span class="title"><a href="{$item->link}" onclick="window.open(this.href);return false">{htmlspecialchars($item->title)}</a></span>
         </li>
         <!--@end-->
     </ul>
diff --git a/widgets/rss_reader/skins/xe_select/list.html b/widgets/rss_reader/skins/xe_select/list.html
index 6935aec3a..78b1f5225 100644
--- a/widgets/rss_reader/skins/xe_select/list.html
+++ b/widgets/rss_reader/skins/xe_select/list.html
@@ -11,7 +11,7 @@
         {@$i=1}
         <select onchange="tab_menu_select({$tab_id}, {count($widget_info->rss_list)}, this.value, this);resize_rss_tabcontent('tab{$tab_id}',{$widget_info->rss_height})">
         <!--@foreach($widget_info->rss_list as $key => $item)-->
-        <option value="{$i}">{$item->title}</option>
+        <option value="{$i}">{htmlspecialchars($item->title)}</option>
         {@$i++}
         <!--@end-->
         </select>