Skip to content
GitLab
Projects
Groups
Snippets
/
Help
Help
Support
Community forum
Keyboard shortcuts
?
Submit feedback
Contribute to GitLab
Sign in
Toggle navigation
Menu
Open sidebar
latoilescoute-dev
scoodle
Commits
be128e81
Commit
be128e81
authored
Jul 09, 2018
by
Thomas Citharel
Browse files
Handle XSS issue on date poll slots
Signed-off-by:
Thomas Citharel
<
tcit@tcit.fr
>
parent
a1a7d180
Changes
2
Hide whitespace changes
Inline
Side-by-side
app/inc/smarty.php
View file @
be128e81
...
...
@@ -77,6 +77,10 @@ function smarty_modifier_html($html) {
return
Utils
::
htmlEscape
(
$html
);
}
function
smarty_modifier_html_special_chars
(
$html
)
{
return
Utils
::
htmlMailEscape
(
$html
);
}
function
smarty_modifier_datepicker_path
(
$lang
)
{
$i
=
0
;
while
(
!
is_file
(
path_for_datepicker_locale
(
$lang
))
&&
$i
<
3
)
{
...
...
tpl/create_date_poll_step_2.tpl
View file @
be128e81
...
...
@@ -70,7 +70,7 @@
<div
class=
"col-sm-2"
>
<label
for=
"d
{
$i
}
-h
{
$j
}
"
class=
"sr-only control-label"
>
{__('Generic', 'Time')}
{
$j
+
1
}
</label>
<input
type=
"text"
class=
"form-control hours"
title=
"
{
$day_value
}
- {__('Generic', 'Time')}
{
$j
+
1
}
"
placeholder=
"{__('Generic', 'Time')}
{
$j
+
1
}
"
id=
"d
{
$i
}
-h
{
$j
}
"
name=
"horaires
{
$i
}
[]"
value=
"
{
$slot
}
"
/>
placeholder=
"{__('Generic', 'Time')}
{
$j
+
1
}
"
id=
"d
{
$i
}
-h
{
$j
}
"
name=
"horaires
{
$i
}
[]"
value=
"
{
$slot
|
html_special_chars
}
"
/>
</div>
{/
foreach
}
...
...
Write
Preview
Supports
Markdown
0%
Try again
or
attach a new file
.
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment