Run all variables that come from user-entered data through p::clean()

This commit is contained in:
Bharat Mediratta
2009-05-31 01:02:51 -07:00
parent a049de28ac
commit 9369ccab7f
14 changed files with 61 additions and 52 deletions
@@ -16,7 +16,7 @@ $("#<?= $tree_id ?>").ready(function() {
<? if (!empty($file_info["is_dir"])): ?>
<span class="ui-icon ui-icon-plus"></span>
<? endif ?>
<label> <?= form::checkbox("checkbox[]", $file_info["path"]) . " $file" ?> </label>
<label> <?= form::checkbox("checkbox[]", p::clean($file_info["path"])) . " " . p::clean($file) ?> </label>
</li>
<? endforeach ?>
</ul>