Fix XSS vectors in HTML attributes (mostly t() calls)

This commit is contained in:
Andy Staudacher
2009-08-31 21:51:57 -07:00
parent 8c3a2db380
commit 2bc73e2e36
24 changed files with 63 additions and 63 deletions

View File

@@ -1,6 +1,6 @@
<?php defined("SYSPATH") or die("No direct script access.") ?>
<span id="gAfterInstall"
title="<?= t("Welcome to Gallery 3") ?>"
title="<?= t("Welcome to Gallery 3")->for_html_attr() ?>"
href="<?= url::site("after_install") ?>"/>
<script type="text/javascript">
$(document).ready(function(){$("#gAfterInstall").gallery_dialog({immediate: true});});