Skip to content
Snippets Groups Projects
Commit 9cffac45 authored by Demian Katz's avatar Demian Katz
Browse files

Fixed escaping problems.

parent 30f48014
No related merge requests found
Hide whitespace changes
Inline Side-by-side
Showing
with 11 additions and 11 deletions
themes/blueprint/templates/RecordDriver/EDS/core.phtml
+ 2
− 2
View file @ 9cffac45
......@@ -65,7 +65,7 @@
<? $pLink = $this->driver->getPLink();
if($pLink): ?>
<span>
<a href="<?=$pLink?>">
<a href="<?=$this->escapeHtmlAttr($pLink)?>">
<?=$this->transEsc('View in EDS')?>
</a>
</span><br />
......@@ -94,7 +94,7 @@
$icon = isset ($customLink['Icon']) ? $customLink['Icon'] : '';
$name = isset($customLink['Name']) ? $customLink['Name'] : '';?>
<span>
<a href="<?=$url?>" target="_blank" title="<?=$mot?>" class="custom-link">
<a href="<?=$this->escapeHtmlAttr($url)?>" target="_blank" title="<?=$mot?>" class="custom-link">
<? if ($icon): ?><img src="<?=$icon?>" /><? endif; ?><?=$name?>
</a>
</span><br />
......
themes/blueprint/templates/RecordDriver/EDS/result-list.phtml
+ 1
− 1
View file @ 9cffac45
......@@ -54,7 +54,7 @@
$icon = isset ($customLink['Icon']) ? $customLink['Icon'] : '';
$name = isset($customLink['Name']) ? $customLink['Name'] : '';?>
<span>
<a href="<?=$url?>" target="_blank" title="<?=$mot?>" class="custom-link">
<a href="<?=$this->escapeHtmlAttr($url)?>" target="_blank" title="<?=$mot?>" class="custom-link">
<? if ($icon): ?><img src="<?=$icon?>" /><? endif; ?><?=$name?>
</a>
</span>
......
themes/bootstrap/templates/RecordDriver/EDS/core.phtml
+ 2
− 2
View file @ 9cffac45
......@@ -25,7 +25,7 @@
<? $pLink = $this->driver->getPLink();
if($pLink): ?>
<span>
<a href="<?=$pLink?>">
<a href="<?=$this->escapeHtmlAttr($pLink)?>">
<?=$this->transEsc('View in EDS')?>
</a>
</span><br />
......@@ -54,7 +54,7 @@
$icon = isset ($customLink['Icon']) ? $customLink['Icon'] : '';
$name = isset($customLink['Name']) ? $customLink['Name'] : '';?>
<span>
<a href="<?=$url?>" target="_blank" title="<?=$mot?>" class="custom-link">
<a href="<?=$this->escapeHtmlAttr($url)?>" target="_blank" title="<?=$mot?>" class="custom-link">
<? if ($icon): ?><img src="<?=$icon?>" /> <? endif; ?><?=$name?>
</a>
</span><br />
......
themes/bootstrap/templates/RecordDriver/EDS/result-list.phtml
+ 1
− 1
View file @ 9cffac45
......@@ -53,7 +53,7 @@
$icon = isset ($customLink['Icon']) ? $customLink['Icon'] : '';
$name = isset($customLink['Name']) ? $customLink['Name'] : '';?>
<span>
<a href="<?=$url?>" target="_blank" title="<?=$mot?>" class="custom-link">
<a href="<?=$this->escapeHtmlAttr($url)?>" target="_blank" title="<?=$mot?>" class="custom-link">
<? if ($icon): ?><img src="<?=$icon?>" /> <? endif; ?><?=$name?>
</a>
</span>
......
themes/bootstrap3/templates/RecordDriver/EDS/core.phtml
+ 2
− 2
View file @ 9cffac45
......@@ -25,7 +25,7 @@
<? $pLink = $this->driver->getPLink();
if($pLink): ?>
<span>
<a href="<?=$pLink?>">
<a href="<?=$this->escapeHtmlAttr($pLink)?>">
<?=$this->transEsc('View in EDS')?>
</a>
</span><br />
......@@ -54,7 +54,7 @@
$icon = isset ($customLink['Icon']) ? $customLink['Icon'] : '';
$name = isset($customLink['Name']) ? $customLink['Name'] : '';?>
<span>
<a href="<?=$url?>" target="_blank" title="<?=$mot?>" class="custom-link">
<a href="<?=$this->escapeHtmlAttr($url)?>" target="_blank" title="<?=$mot?>" class="custom-link">
<? if ($icon): ?><img src="<?=$icon?>" /> <? endif; ?><?=$name?>
</a>
</span><br />
......
themes/bootstrap3/templates/RecordDriver/EDS/result-list.phtml
+ 1
− 1
View file @ 9cffac45
......@@ -53,7 +53,7 @@
$icon = isset ($customLink['Icon']) ? $customLink['Icon'] : '';
$name = isset($customLink['Name']) ? $customLink['Name'] : '';?>
<span>
<a href="<?=$url?>" target="_blank" title="<?=$mot?>" class="custom-link">
<a href="<?=$this->escapeHtmlAttr($url)?>" target="_blank" title="<?=$mot?>" class="custom-link">
<? if ($icon): ?><img src="<?=$icon?>" /> <? endif; ?><?=$name?>
</a>
</span>
......
themes/jquerymobile/templates/RecordDriver/EDS/core.phtml
+ 2
− 2
View file @ 9cffac45
......@@ -19,7 +19,7 @@
<? endif; ?>
<? $pLink = $this->driver->getPLink();
if($pLink): ?>
<br/><a href="<?=$pLink?>">
<br/><a href="<?=$this->escapeHtmlAttr($pLink)?>">
<?=$this->transEsc('View in EDS')?>
</a>
<? endif; ?>
......@@ -41,7 +41,7 @@
$mot = isset($customLink['MouseOverText'])? $customLink['MouseOverText'] : '';
$icon = isset ($customLink['Icon']) ? $customLink['Icon'] : '';
$name = isset($customLink['Name']) ? $customLink['Name'] : '';?>
<a href="<?=$url?>" target="_blank" title="<?=$mot?>" class="custom-link">
<a href="<?=$this->escapeHtmlAttr($url)?>" target="_blank" title="<?=$mot?>" class="custom-link">
<? if ($icon): ?><img src="<?=$icon?>" /> <? endif; ?><?=$name?>
</a><br/>
<? endforeach; ?>
......
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment