Added strip_tags() to setting titles in ElggEntity

git-svn-id: https://code.elgg.org/elgg/trunk@3463 36083f99-b078-4883-b0ff-0f9b5a30f544

diff --git a/engine/lib/entities.php b/engine/lib/entities.php
index 4d2e17b563ec8f9b88b0e1ed8afb2bd9f51bd3cf..7e3dcb62893663bee630158ce4e7de06c64d3aa6 100644 (file)
--- a/engine/lib/entities.php
+++ b/engine/lib/entities.php
@@ -161,6 +161,11 @@
                                if ((array_key_exists('guid', $this->attributes)) && ($name=='guid'))
                                        return false;
                                        
+                               // strip out tags from title
+                               if ($name == 'title') {
+                                       $value = strip_tags($value);
+                               }
+                                       
                                $this->attributes[$name] = $value;
                        }
                        else