diff --git a/include/class_baseSelector.inc b/include/class_baseSelector.inc index 7fac5d87708f1f800d92b6ee87de9d241df3c154..344776ee7a3db0922f0894ea8e1d23be26f1cd0f 100644 --- a/include/class_baseSelector.inc +++ b/include/class_baseSelector.inc @@ -238,9 +238,9 @@ class baseSelector $this->tree .= "<li><a$selected $link>". '<img class="center" '. 'src="'.htmlentities($config->department_info[$base]['img'], ENT_COMPAT, 'UTF-8').'" '. - 'alt="'.$config->department_info[$base]['name'].'"/> '. - $this->gennonbreaks($config->department_info[$base]['name']). - ($config->department_info[$base]['description'] == '' ? '' : ' <span class="informal">['.$this->gennonbreaks($config->department_info[$base]['description']).']</span>'). + 'alt="'.htmlentities($config->department_info[$base]['name'], ENT_COMPAT, 'UTF-8').'"/> '. + $this->escape($config->department_info[$base]['name']). + (($config->department_info[$base]['description'] == '') ? '' : ' <span class="informal">['.$this->escape($config->department_info[$base]['description']).']</span>'). '</a>'; $last_indent = $indent; @@ -267,13 +267,13 @@ class baseSelector /*! - * \brief Replace all space of the string by non-breaking space + * \brief Replace all space of the string by non-breaking space and escapes HTML * * \param String $string The string which his space will be replaced */ - function gennonbreaks($string) + function escape($string) { - return str_replace('-', '‑', str_replace(' ', ' ', $string)); + return str_replace(' ', ' ', htmlentities($string, ENT_COMPAT, 'UTF-8')); } /*!