From 37fb01baec92a3e7898380923712e0c48b21107a Mon Sep 17 00:00:00 2001
From: Derek Allard <derek.allard@ellislab.com>
Date: Thu, 6 Mar 2008 13:01:47 +0000
Subject: Modified img() in the HTML Helper to remove an unneeded space.
 Modified anchor() in the URL helper to convert entities in the title
 attribute.

---
 system/helpers/html_helper.php |  2 +-
 system/helpers/url_helper.php  |  2 +-
 user_guide/changelog.html      | 43 +++++++++++++++++++++++++-----------------
 3 files changed, 28 insertions(+), 19 deletions(-)

diff --git a/system/helpers/html_helper.php b/system/helpers/html_helper.php
index 0c884502f..4684d8ea8 100644
--- a/system/helpers/html_helper.php
+++ b/system/helpers/html_helper.php
@@ -199,7 +199,7 @@ if (! function_exists('img'))
 			$src = array('src' => $src);
 		}
 
-		$img = '<img ';
+		$img = '<img';
 		
 		foreach ($src as $k=>$v)
 		{
diff --git a/system/helpers/url_helper.php b/system/helpers/url_helper.php
index ad71caa45..bd94b390c 100644
--- a/system/helpers/url_helper.php
+++ b/system/helpers/url_helper.php
@@ -119,7 +119,7 @@ if (! function_exists('anchor'))
 
 		if ($attributes == '')
 		{
-			$attributes = ' title="'.$title.'"';
+			$attributes = ' title="'.htmlentities($title).'"';
 		}
 		else
 		{
diff --git a/user_guide/changelog.html b/user_guide/changelog.html
index c8c74f1ff..f80e7b99b 100644
--- a/user_guide/changelog.html
+++ b/user_guide/changelog.html
@@ -57,51 +57,60 @@ Change Log
 
 <h1>Change Log</h1>
 
-
 <h2>Version 1.6.2</h2>
 <p>Release Date: not currently released</p>
 <ul>
-    <li>No additions currently listed</li>
-    <li>Added 'application/vnd.ms-powerpoint' to list of mime types.<br />
+    <li>Config
+    	<ul>
+    		<li>Added 'application/vnd.ms-powerpoint' to list of mime types.</li>
+    	</ul>
+    </li>
+    <li>Helpers
+    	<ul>
+    		<li>Modified <kbd>img()</kbd> in the <a href="helpers/html_helper.html">HTML Helper</a> to remove an unneeded space.</li>
+    		<li>Modified <kbd>anchor()</kbd> in the <a href="helpers/url_helper.html">URL helper</a> to convert entities in the title attribute.</li>
+    	</ul>
     </li>
 </ul>
+
 <h3>Bugfixes for 1.6.2</h3>
 <ul>
-    <li>Fixed assorted user guide typos (#3453)</li>
-	<li>Fixed an AR_caching error where it wasn't tracking table aliases (#3463)</li>
-	<li>Fixed a bug in the DB class testing the $params argument</li>
+    <li>Fixed assorted user guide typos (#3453).</li>
+	<li>Fixed an AR_caching error where it wasn't tracking table aliases (#3463).</li>
+	<li>Fixed a bug in the DB class testing the $params argument.</li>
 	<li>Fixed a bug in the Table library where the integer 0 in cell data would be displayed as a blank cell.</li>
 	<li>Fixed a bug (#3523) in get_filenames() with recursion.</p>
 </ul>
+
 <h2>Version 1.6.1</h2>
 <p>Release Date: February 12, 2008</p>
-
 <ul>
 	<li>Active Record 
 		<ul>
 			<li>Added <a href="./database/active_record.html#caching">Active Record Caching</a>.</li>
-			<li>Made Active Record fully database-prefix aware</li>
+			<li>Made Active Record fully database-prefix aware.</li>
 		</ul>
 	</li>
 	<li>Database drivers
 		<ul>
-			<li>Added support for setting client character set and collation for MySQLi</li>
+			<li>Added support for setting client character set and collation for MySQLi.</li>
 		</ul>
 	</li>
 	<li>Core Changes
 		<ul>
-			<li>Modified xss_clean() to be more intelligent with its handling of URL encoded strings.</li>
+			<li>Modified <kbd>xss_clean()</kbd> to be more intelligent with its handling of URL encoded strings.</li>
 			<li>Added $_SERVER, $_FILES, $_ENV, and $_SESSION to sanitization of globals.</li>
 		    <li>Added a <a href="./helpers/path_helper.html">Path Helper</a>.</li>
-			<li>Simplified _reindex_segments() in the URI class</li>
+			<li>Simplified <kbd>_reindex_segments()</kbd> in the URI class.</li>
 			<li>Escaped the '-' in the default 'permitted_uri_chars' config item, to prevent errors if developers just try to add additional characters to the end of the default expression.</li>
-			<li>Modified method calling to controllers to show a 404 when a private or protected method is accessed via a URL</li>
-			<li>Modified framework initiated 404s to log the controller and method for invalid requests</li>
+			<li>Modified method calling to controllers to show a 404 when a private or protected method is accessed via a URL.</li>
+			<li>Modified framework initiated 404s to log the controller and method for invalid requests.</li>
 		</ul>
 	</li>
 	<li>Helpers
 		<ul>
-			<li>Modified get_filenames() in the File Helper to return FALSE if the $source_dir is not readable</li>
+			<li>Modified <kbd>get_filenames()</kbd> in the File Helper to return FALSE if the $source_dir is not readable.</li>
+			</ul>
 	</li>
 </ul>
 
@@ -110,12 +119,12 @@ Change Log
 <ul>
 	<li>Deprecated is_numeric as a validation rule. Use of numeric and integer are preferred.</li>
 	<li>Fixed bug (#3379) in DBForge with SQLite for table creation.</li>
-	<li>Made Active Record fully database prefix aware (#3384)</li>
-	<li>Fixed a bug where DBForge was outputting invalid SQL in Postgres by adding brackets around the tables in FROM</li>
+	<li>Made Active Record fully database prefix aware (#3384).</li>
+	<li>Fixed a bug where DBForge was outputting invalid SQL in Postgres by adding brackets around the tables in FROM.</li>
 	<li>Changed the behaviour of Active Record's update() to make the WHERE clause optional (#3395).</li>
     <li>Fixed a bug (#3396) where certain POST variables would cause a PHP warning.</li>
     <li>Fixed a bug in query binding (#3402).</li>
-	<li>Changed order of SQL keywords in the Profiler $highlight array so OR would not be highlighted before ORDER BY</li>
+	<li>Changed order of SQL keywords in the Profiler $highlight array so OR would not be highlighted before ORDER BY.</li>
 	<li>Fixed a bug (#3404) where the MySQLi driver was testing if $this->conn_id was a resource instead of an object.</li>
 	<li>Fixed a bug (#3419) connecting to a database via a DSN string.</li>
 	<li>Fixed a bug (#3445) where the routed segment array was not re-indexed to begin with 1 when the default controller is used.</li>
-- 
cgit v1.2.3-24-g4f1b