replacing htmlentities() by sanitize->html() for about the 500th time now

git-svn-id: http://svn.mozilla.org/addons/trunk@2875 4eb1ac78-321c-0410-a911-ec516a8615a5

1 files changed, 3 insertions, 1 deletions

diff --git a/site/app/app_controller.php b/site/app/app_controller.php
index 44f187d..20eb491 100644
--- a/site/app/app_controller.php
+++ b/site/app/app_controller.php
@@ -232,6 +232,8 @@ class AppController extends Controller
      */
     function publish($viewvar, $value, $sanitizeme = true) {
         if ($sanitizeme) {
+            uses('Sanitize');
+            if (!isset($this->Sanitize)) $this->Sanitize = new Sanitize();
             $this->_sanitizeArray($value);
         }
         $this->set($viewvar, $value);
@@ -261,7 +263,7 @@ class AppController extends Controller
             
         } elseif (is_string($data)) {
             // encode the string
-            $data = htmlentities($data, ENT_QUOTES, 'UTF-8');
+            $data = $this->Sanitize->html($data);
         }
         // otherwise, we don't do anything (with ints or null etc.).
     }