Store notices safely to prevent potential XSS when notices are displayed locally or by remote systems where they're shipped. Ticket #6154

src/etc/inc/notices.inc

@@ -90,11 +90,11 @@ function file_notice($id, $notice, $category = "General", $url = "", $priority =
 	}
 	$queuekey = time();
 	$toqueue = array(
-				'id'		=> $id,
-				'notice'	=> $notice,
-				'url'		=> $url,
-				'category'	=> $category,
-				'priority'	=> $priority,
+				'id'		=> htmlentities($id),
+				'notice'	=> htmlentities($notice),
+				'url'		=> htmlentities($url),
+				'category'	=> htmlentities($category),
+				'priority'	=> htmlentities($priority),
 			);
 	while (isset($queue[$queuekey])) {
 		$queuekey++;