Fixed security issue in the url and img tags.

git-svn-id: http://framework.zend.com/svn/framework/standard/trunk@20655 44c647ce-9c0f-0410-b52a-842ac1e357ba

library/Zend/Markup/Renderer/Html/Img.php

@@ -73,6 +73,9 @@ class Zend_Markup_Renderer_Html_Img extends Zend_Markup_Renderer_Html_HtmlAbstra
             }
         }
 
+        // run the URI through htmlentities
+        $uri = htmlentities($uri, ENT_QUOTES, 'UTF-8');
+
         return "<img src=\"{$uri}\" alt=\"{$alt}\"" . Zend_Markup_Renderer_Html::renderAttributes($token) . " />";
     }
 

library/Zend/Markup/Renderer/Html/Url.php

@@ -68,6 +68,9 @@ class Zend_Markup_Renderer_Html_Url extends Zend_Markup_Renderer_Html_HtmlAbstra
 
         $attributes = Zend_Markup_Renderer_Html::renderAttributes($token);
 
+        // run the URI through htmlentities
+        $uri = htmlentities($uri, ENT_QUOTES, 'UTF-8');
+
         return "<a href=\"{$uri}\"{$attributes}>{$text}</a>";
     }