stian/gallery3
1
0
Fork 0
mirror of https://github.com/Pathduck/gallery3.git synced 2026-05-20 03:19:13 -04:00
Code Issues Actions Packages Projects Releases Wiki Activity

#2082 - Sanitize admin theme options that get placed directly in HTML.

Browse Source
This commit is contained in:
shadlaws
2013-09-06 08:28:10 +02:00
parent 04953a4f5e
commit 5e19662b75
1 changed files with 10 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
modules/gallery/controllers/admin_theme_options.php
View File

@@ -53,11 +53,17 @@ class Admin_Theme_Options_Controller extends Admin_Controller {
module::set_var("gallery", "resize_size", $resize_size);
}
module::set_var("gallery", "header_text", $form->edit_theme->header_text->value);
module::set_var("gallery", "footer_text", $form->edit_theme->footer_text->value);
module::set_var("gallery", "show_credits", $form->edit_theme->show_credits->value);
module::set_var("gallery", "favicon_url", $form->edit_theme->favicon_url->value);
module::set_var("gallery", "apple_touch_icon_url", $form->edit_theme->apple_touch_icon_url->value);
// Sanitize values that get placed directly in HTML output by theme.
module::set_var("gallery", "header_text",
html::purify($form->edit_theme->header_text->value));
module::set_var("gallery", "footer_text",
html::purify($form->edit_theme->footer_text->value));
module::set_var("gallery", "favicon_url",
html::purify($form->edit_theme->favicon_url->value));
module::set_var("gallery", "apple_touch_icon_url",
html::purify($form->edit_theme->apple_touch_icon_url->value));
module::event("theme_edit_form_completed", $form);