Replace the last vestiges of htmlentities with htmlspecialchars

2023-09-03 19:47:22 +02:00
parent 03ad26655c
commit 1fa4cb19a2
4 changed files with 6 additions and 6 deletions
--- a/controllers/EditAlbum.php
+++ b/controllers/EditAlbum.php
@@ -186,8 +186,8 @@ class EditAlbum extends HTMLController
 			}

 			// Quick stripping.
-			$data['tag'] = htmlentities($data['tag']);
-			$data['description'] = htmlentities($data['description']);
+			$data['tag'] = htmlspecialchars($data['tag']);
+			$data['description'] = htmlspecialchars($data['description']);
 			$data['slug'] = strtr($data['slug'], [' ' => '-', '--' => '-', '&' => 'and', '=>' => '', "'" => "", ":"=> "", '\\' => '-']);

 			// TODO: when updating slug, update slug for all photos in this album.