[TYPO3-core] FYI48: #12541: Unescaped & in urls of list module

Dmitry Dulepov dmitry.dulepov at gmail.com
Wed Nov 11 09:23:46 CET 2009


Hi!

Helmut Hummel wrote:
> changing from:
>> htmlspecialchars($url . '& ...
> 
> to:
>> htmlspecialchars($url . '& ...
> 
> doesn't look right to me.
> 
> So -1 for now.

-1 from me too.

-- 
Dmitry Dulepov
"Trust me, I am a doctor!" (c) Gregory House, M.D.


More information about the TYPO3-team-core mailing list