Fix XSS vectors in HTML attributes (mostly t() calls)

This commit is contained in:
Andy Staudacher
2009-08-31 21:51:57 -07:00
parent 8c3a2db380
commit 2bc73e2e36
24 changed files with 63 additions and 63 deletions
+1 -1
View File
@@ -13,7 +13,7 @@
<p>
<a href="<?= url::site("form/edit/users/{$user->id}") ?>"
title="<?= t("Edit Your Profile") ?>"
title="<?= t("Edit Your Profile")->for_html_attr() ?>"
id="gAfterInstallChangePasswordLink" class="gButtonLink ui-state-default ui-corners-all"><?= t("Change Password Now") ?></a>
<script>
$("#gAfterInstallChangePasswordLink").gallery_dialog();