Properly escape input URL.

print.pages.inc

@@ -20,7 +20,7 @@ $_print_urls = PRINT_URLS_DEFAULT;
  */
 function print_controller_html() {
   $args = func_get_args();
-  $path = implode('/', $args);
+  $path = filter_xss(implode('/', $args));
   $cid = isset($_GET['comment']) ? (int)$_GET['comment'] : NULL;
 
   $print = print_controller($path, $cid, PRINT_HTML_FORMAT);

print_mail/print_mail.inc

@@ -26,7 +26,7 @@ function print_mail_form($form, &$form_state) {
   // Remove the printmail/ prefix
   $path_arr = explode('/', $_GET['q']);
   unset($path_arr[0]);
-  $path = implode('/', $path_arr);
+  $path = filter_xss(implode('/', $path_arr));
   if (empty($path)) {
     // If no path was provided, let's try to generate a page for the referer
     global $base_url;

print_pdf/print_pdf.pages.inc

@@ -24,7 +24,7 @@ function print_pdf_controller() {
   $GLOBALS['conf']['cache'] = FALSE;
 
   $args = func_get_args();
-  $path = implode('/', $args);
+  $path = filter_xss(implode('/', $args));
   $cid = isset($_GET['comment']) ? (int)$_GET['comment'] : NULL;
 
   if (!empty($path)) {