stian/gallery3
1
0
Fork 0
mirror of https://github.com/Pathduck/gallery3.git synced 2026-07-11 01:33:51 -04:00
Code Issues Actions Packages Projects Releases Wiki Activity

Fix XSS vectors in HTML attributes (mostly t() calls)

Browse Source
This commit is contained in:
Andy Staudacher
2009-08-31 21:51:57 -07:00
parent 8c3a2db380
commit 2bc73e2e36
24 changed files with 63 additions and 63 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
modules/watermark/views/admin_watermarks.html.php
View File

@@ -7,7 +7,7 @@
<? if (empty($name)): ?>
<a href="<?= url::site("admin/watermarks/form_add") ?>"
title="<?= t("Upload a watermark") ?>"
title="<?= t("Upload a watermark")->for_html_attr() ?>"
class="gDialogLink gButtonLink ui-icon-left ui-state-default ui-corner-all"><span class="ui-icon ui-icon-document-b"></span><?= t("Upload a watermark") ?></a>
<? else: ?>
<h2> <?= t("Active Watermark") ?> </h2>
@@ -26,10 +26,10 @@
</div>
<div class="controls">
<a href="<?= url::site("admin/watermarks/form_edit") ?>"
title="<?= t("Edit Watermark") ?>"
title="<?= t("Edit Watermark")->for_html_attr() ?>"
class="gDialogLink gButtonLink ui-icon-left ui-state-default ui-corner-all"><span class="ui-icon ui-icon-pencil"></span><?= t("edit") ?></a>
<a href="<?= url::site("admin/watermarks/form_delete") ?>"
title="<?= t("Delete Watermark") ?>"
title="<?= t("Delete Watermark")->for_html_attr() ?>"
class="gDialogLink gButtonLink ui-icon-left ui-state-default ui-corner-all"><span class="ui-icon ui-icon-trash"></span><?= t("delete") ?></a>
</div>
</div>