安全转义

2014-02-28 10:05:29 +08:00
parent de7b57c2cb
commit a54c3db00f
1 changed files with 3 additions and 1 deletions
--- a/usr/plugins/HelloWorld/Plugin.php
+++ b/usr/plugins/HelloWorld/Plugin.php
@@ -62,6 +62,8 @@ class HelloWorld_Plugin implements Typecho_Plugin_Interface
     */
    public static function render()
    {
-        echo '<span class="message success">' . Typecho_Widget::widget('Widget_Options')->plugin('HelloWorld')->word . '</span>';
+        echo '<span class="message success">'
+            . htmlspecialchars(Typecho_Widget::widget('Widget_Options')->plugin('HelloWorld')->word)
+            . '</span>';
    }
 }