Commit 677eb65b authored by Kevin Abel's avatar Kevin Abel
Browse files

Escape HTML entities in the Google API URL

parent d3781aad
......@@ -61,7 +61,7 @@ $params = array(
if (!empty($apiKey)) {
$params['key'] = $apiKey;
}
$page->addScript('//www.google.com/jsapi?' . http_build_query($params));
$page->addScript(htmlspecialchars('//www.google.com/jsapi?' . http_build_query($params)));
$page->addStyleSheet('css/search.css');
//u is referring site
......
Supports Markdown
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment