Alexandre Julliard : announce.php: Escape html special characters.

[Alexandre Julliard]

Module: website
Branch: master
Commit: a564b911a57276b88c05f33b3c56f5b4f3b35503
URL:    http://source.winehq.org/git/website.git/?a=commit;h=a564b911a57276b88c05f33...

Author: Alexandre Julliard <julliard(a)winehq.org>
Date:   Sat Mar  7 15:13:14 2015 +0900

announce.php: Escape html special characters.

---

 include/plugins/announce.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/include/plugins/announce.php b/include/plugins/announce.php
index 6c61baa..fb707a0 100644
--- a/include/plugins/announce.php
+++ b/include/plugins/announce.php
@@ -26,7 +26,7 @@ if ($arr = file($announce))
         if ($c == 0)
             $title = $html->encode(trim($arr[$c]));
 
-        $arr[$c] = $html->urlify($arr[$c]);
+        $arr[$c] = $html->urlify($html->encode($arr[$c]));
 
         if (preg_match("/^--------------------/", $arr[$c])) $in_header = 0;
         else if (preg_match("/^Bugs fixed/", $arr[$c])) $in_bugs = 1;