X-Git-Url: https://git.stderr.nl/gitweb?a=blobdiff_plain;f=xtaran%2Ftagging;h=bde29ebd39843ab0966e661bbd48d169728db93f;hb=292b068646a58b75996b5b2cdc79e8d48befc87b;hp=988f3229df56f33e02650ab308c700a74e4bf05c;hpb=2f4ac8d0f79206acaeae4efb2c6b65f80d5823c3;p=matthijs%2Fupstream%2Fblosxom-plugins.git

diff --git a/xtaran/tagging b/xtaran/tagging
index 988f322..bde29eb 100644
--- a/xtaran/tagging
+++ b/xtaran/tagging
@@ -328,9 +328,10 @@ sub story {
 	my $shared_tags_list = join(', ', @{$other_stories{$other}});
 	my $shared_tags_number = scalar(@{$other_stories{$other}});
 
-	my $attr_title = "$shared_tags_number $shared_tags_text: $shared_tags_list";
-
-	$related_stories .= qq($related_story_prefix<a href="$opath" class="$related_story_class" title="$attr_title">$title</a>);
+	my $attr_title = blosxom::blosxom_html_escape("$shared_tags_number $shared_tags_text: $shared_tags_list");
+	my $attr_href = blosxom::blosxom_html_escape($opath);
+	my $html_title = blosxom::blosxom_html_escape($title);
+	$related_stories .= qq($related_story_prefix<a href="$attr_href" class="$related_story_class" title="$attr_title">$html_title</a>);
 
 	$related_stories .= ' (' 
 	    if $show_shared_tags || $show_number_of_shared_tags;
@@ -338,7 +339,7 @@ sub story {
 	    if $show_number_of_shared_tags;
 	$related_stories .= $shared_tags_text
 	    if $show_shared_tags || $show_number_of_shared_tags;
-	$related_stories .= ": $shared_tags_list"
+	$related_stories .= blosxom::blosxom_html_escape(": $shared_tags_list")
 	    if $show_shared_tags;
 	$related_stories .= ')'
 	    if $show_shared_tags || $show_number_of_shared_tags;