From d12b9bac14311b7438455962e8ee275d8fe12bf2 Mon Sep 17 00:00:00 2001
From: Geert De Deckere <geert@idoe.be>
Date: Fri, 30 Jul 2010 06:17:16 +0200
Subject: [PATCH] Fixed #3138

---
 views/pagination/basic.php    | 10 +++++-----
 views/pagination/floating.php | 10 +++++-----
 2 files changed, 10 insertions(+), 10 deletions(-)

diff --git a/views/pagination/basic.php b/views/pagination/basic.php
index e9170a7..8ec7384 100644
--- a/views/pagination/basic.php
+++ b/views/pagination/basic.php
@@ -1,13 +1,13 @@
 <p class="pagination">
 
 	<?php if ($first_page !== FALSE): ?>
-		<a href="<?php echo $page->url($first_page) ?>" rel="first"><?php echo __('First') ?></a>
+		<a href="<?php echo HTML::chars($page->url($first_page)) ?>" rel="first"><?php echo __('First') ?></a>
 	<?php else: ?>
 		<?php echo __('First') ?>
 	<?php endif ?>
 
 	<?php if ($previous_page !== FALSE): ?>
-		<a href="<?php echo $page->url($previous_page) ?>" rel="prev"><?php echo __('Previous') ?></a>
+		<a href="<?php echo HTML::chars($page->url($previous_page)) ?>" rel="prev"><?php echo __('Previous') ?></a>
 	<?php else: ?>
 		<?php echo __('Previous') ?>
 	<?php endif ?>
@@ -17,19 +17,19 @@
 		<?php if ($i == $current_page): ?>
 			<strong><?php echo $i ?></strong>
 		<?php else: ?>
-			<a href="<?php echo $page->url($i) ?>"><?php echo $i ?></a>
+			<a href="<?php echo HTML::chars($page->url($i)) ?>"><?php echo $i ?></a>
 		<?php endif ?>
 
 	<?php endfor ?>
 
 	<?php if ($next_page !== FALSE): ?>
-		<a href="<?php echo $page->url($next_page) ?>" rel="next"><?php echo __('Next') ?></a>
+		<a href="<?php echo HTML::chars($page->url($next_page)) ?>" rel="next"><?php echo __('Next') ?></a>
 	<?php else: ?>
 		<?php echo __('Next') ?>
 	<?php endif ?>
 
 	<?php if ($last_page !== FALSE): ?>
-		<a href="<?php echo $page->url($last_page) ?>" rel="last"><?php echo __('Last') ?></a>
+		<a href="<?php echo HTML::chars($page->url($last_page)) ?>" rel="last"><?php echo __('Last') ?></a>
 	<?php else: ?>
 		<?php echo __('Last') ?>
 	<?php endif ?>
diff --git a/views/pagination/floating.php b/views/pagination/floating.php
index 4d34564..f776fd1 100644
--- a/views/pagination/floating.php
+++ b/views/pagination/floating.php
@@ -58,13 +58,13 @@ for ($i = $n7; $i <= $n8; $i++)
 <p class="pagination">
 
 	<?php if ($first_page !== FALSE): ?>
-		<a href="<?php echo $page->url($first_page) ?>" rel="first"><?php echo __('First') ?></a>
+		<a href="<?php echo HTML::chars($page->url($first_page)) ?>" rel="first"><?php echo __('First') ?></a>
 	<?php else: ?>
 		<?php echo __('First') ?>
 	<?php endif ?>
 
 	<?php if ($previous_page !== FALSE): ?>
-		<a href="<?php echo $page->url($previous_page) ?>" rel="prev"><?php echo __('Previous') ?></a>
+		<a href="<?php echo HTML::chars($page->url($previous_page)) ?>" rel="prev"><?php echo __('Previous') ?></a>
 	<?php else: ?>
 		<?php echo __('Previous') ?>
 	<?php endif ?>
@@ -74,19 +74,19 @@ for ($i = $n7; $i <= $n8; $i++)
 		<?php if ($number === $current_page): ?>
 			<strong><?php echo $content ?></strong>
 		<?php else: ?>
-			<a href="<?php echo $page->url($number) ?>"><?php echo $content ?></a>
+			<a href="<?php echo HTML::chars($page->url($number)) ?>"><?php echo $content ?></a>
 		<?php endif ?>
 
 	<?php endforeach ?>
 
 	<?php if ($next_page !== FALSE): ?>
-		<a href="<?php echo $page->url($next_page) ?>" rel="next"><?php echo __('Next') ?></a>
+		<a href="<?php echo HTML::chars($page->url($next_page)) ?>" rel="next"><?php echo __('Next') ?></a>
 	<?php else: ?>
 		<?php echo __('Next') ?>
 	<?php endif ?>
 
 	<?php if ($last_page !== FALSE): ?>
-		<a href="<?php echo $page->url($last_page) ?>" rel="last"><?php echo __('Last') ?></a>
+		<a href="<?php echo HTML::chars($page->url($last_page)) ?>" rel="last"><?php echo __('Last') ?></a>
 	<?php else: ?>
 		<?php echo __('Last') ?>
 	<?php endif ?>
-- 
2.11.4.GIT