follow-up r111347 : adding escapeTemplateParameter around the user supplied optional date attribute

This commit is contained in:
Thomas Gries 2012-02-13 01:49:50 +00:00
parent e0d4f1dc22
commit 46e1da3b14
Notes: Thomas Gries 2012-02-13 01:49:50 +00:00

View file

@ -308,7 +308,7 @@ class RSSParser {
// PHP > 5.3.0 users can better use date_create_from_format method to reformat a date string
$tempTimezone = date_default_timezone_get();
date_default_timezone_set( 'UTC' );
$txt = date( $this->date, strtotime( $item[ $info ] ) );
$txt = date( $this->date, strtotime( $this->escapeTemplateParameter( $item[ $info ] ) ) );
date_default_timezone_set( $tempTimezone );
break;
default: