# HG changeset patch
# User Matti Hamalainen <ccr@tnsp.org>
# Date 1521466935 -7200
# Node ID 39f50d08ec509f9ff342aa1642ce92fd48bef23b
# Parent  d03fad24f4bc3e62e8bde5f549b2a71fedefc887
Fix quoting of image element alt texts.

diff -r d03fad24f4bc -r 39f50d08ec50 mgallery.php
--- a/mgallery.php	Mon Mar 19 15:29:54 2018 +0200
+++ b/mgallery.php	Mon Mar 19 15:42:15 2018 +0200
@@ -103,6 +103,12 @@
 }
 
 
+function dhentities($str)
+{
+  return htmlentities($str, ENT_COMPAT, "UTF-8");
+}
+
+
 function mgMangleURI($filename)
 {
   global $pageDebug;
@@ -276,7 +282,7 @@
         "    <div class=\"imageBox\" title=\"".mgGetImageTitleStr($filename, $data).
         "\"><a href=\"".mgGetURL($galPath, $filename)."\"><img src=\"".
         mgGetImageURL($galTNPath, $filename).
-        "\" alt=\"".chentities($filename)."\"></a></div>\n".
+        "\" alt=\"".dhentities($filename)."\"></a></div>\n".
         mgGetArr($data, "caption", "    <div class=\"imageCaption\">%1</div>\n", "", "chentities");
 /*
       if ($mode == "")
@@ -319,7 +325,7 @@
       echo
       "    <a href=\"".mgGetURL(mgCleanPath(TRUE, $galPath, $filename), FALSE)."\">".
       "<img class=\"albumIcon\" src=\"".$atmp."\" alt=\"".
-      mgGetTrans($data["caption"], TRUE).
+      dhentities(mgGetTrans($data["caption"], TRUE)).
       "\" />\n".
       "    <div class=\"albumTitle\">".mgGetTrans($data["caption"], TRUE)."</div></a>\n";
     }