From 5ca774e85af3cf1684079b710ad0161eb4b4ff08 Mon Sep 17 00:00:00 2001
From: Ralf Becker <ralfbecker@outdoor-training.de>
Date: Tue, 16 Aug 2011 11:45:51 +0000
Subject: [PATCH] url need to run throught htmlspecialchars too (like every
 attribute in html markup), eg. "x&reg_id=" fails otherwise

---
 phpgwapi/inc/class.html.inc.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/phpgwapi/inc/class.html.inc.php b/phpgwapi/inc/class.html.inc.php
index 8b2e0769d8..35790fabc1 100644
--- a/phpgwapi/inc/class.html.inc.php
+++ b/phpgwapi/inc/class.html.inc.php
@@ -1147,7 +1147,7 @@ class html
 			$url = self::link($url,$vars);
 		}
 		//echo "<p>html::a_href('".htmlspecialchars($content)."','$url',".print_r($vars,True).") = ".self::link($url,$vars)."</p>";
-		return '<a href="'.$url.'" '.$options.'>'.$content.'</a>';
+		return '<a href="'.htmlspecialchars($url).'" '.$options.'>'.$content.'</a>';
 	}
 
 	/**