| Index: trunk/extensions/CodeReview/backend/DiffHighlighter.php |
| — | — | @@ -188,6 +188,7 @@ |
| 189 | 189 | # Rely on $left, $right initialization above |
| 190 | 190 | } |
| 191 | 191 | |
| | 192 | + $content = htmlspecialchars( $content ); |
| 192 | 193 | $classAttr = is_null($class) ? '' : " class=\"$class\""; |
| 193 | 194 | return sprintf( "<tr class=\"commentable\" {$idAttr}>{$formatLN}<td%s>%s</td></tr>\n", |
| 194 | 195 | $left, $right, |