--- a/plugins/SpecialSearch.php Sun Aug 12 13:33:04 2007 -0400
+++ b/plugins/SpecialSearch.php Sun Aug 12 14:56:52 2007 -0400
@@ -396,7 +396,7 @@
$regex = '/(' . implode('|', $words2) . ')/i';
$pt = preg_replace($regex, '<span class="search-term">\\1</span>', $pt);
- $title = preg_replace($regex, '<span class="title-search-term">\\1</span>', $paths->pages[$page]['name']);
+ $title = preg_replace($regex, '<span class="title-search-term">\\1</span>', htmlspecialchars($paths->pages[$page]['name']));
$cut_off = false;