mirror of
https://github.com/Pathduck/gallery3.git
synced 2026-07-23 00:04:03 -04:00
Fix XSS vectors in HTML attributes (mostly t() calls)
This commit is contained in:
@@ -13,7 +13,7 @@
|
||||
|
||||
<p>
|
||||
<a href="<?= url::site("form/edit/users/{$user->id}") ?>"
|
||||
title="<?= t("Edit Your Profile") ?>"
|
||||
title="<?= t("Edit Your Profile")->for_html_attr() ?>"
|
||||
id="gAfterInstallChangePasswordLink" class="gButtonLink ui-state-default ui-corners-all"><?= t("Change Password Now") ?></a>
|
||||
<script>
|
||||
$("#gAfterInstallChangePasswordLink").gallery_dialog();
|
||||
|
||||
Reference in New Issue
Block a user