*** class.t3lib_recordlist.php.old	2008-05-14 03:18:54.000000000 -0500
--- class.t3lib_recordlist.php	2008-05-14 03:24:28.000000000 -0500
***************
*** 379,386 ****
  	 * @return	string		Language icon
  	 */
  	function languageFlag($sys_language_uid)	{
! 		return ($this->languageIconTitles[$sys_language_uid]['flagIcon'] ? '<img src="'.$this->languageIconTitles[$sys_language_uid]['flagIcon'].'" class="absmiddle" alt="" />&nbsp;' : '').
! 				htmlspecialchars($this->languageIconTitles[$sys_language_uid]['title']);
  	}
  }
  
--- 379,390 ----
  	 * @return	string		Language icon
  	 */
  	function languageFlag($sys_language_uid)	{
! 		$title = htmlspecialchars($this->languageIconTitles[$sys_language_uid]['title']);
! 
! 		return ($this->languageIconTitles[$sys_language_uid]['flagIcon']
! 			? '<img src="'.$this->languageIconTitles[$sys_language_uid]['flagIcon'].'" class="absmiddle" alt="" title="'.$title.'" />&nbsp;'
! 			: '').
! 			'<span>'.$title.'</span>';
  	}
  }