mirror of
https://github.com/Pathduck/gallery3.git
synced 2026-08-02 13:10:48 -04:00
Run all variables that come from user-entered data through p::clean()
This commit is contained in:
@@ -16,7 +16,7 @@ $("#<?= $tree_id ?>").ready(function() {
|
||||
<? if (!empty($file_info["is_dir"])): ?>
|
||||
<span class="ui-icon ui-icon-plus"></span>
|
||||
<? endif ?>
|
||||
<label> <?= form::checkbox("checkbox[]", $file_info["path"]) . " $file" ?> </label>
|
||||
<label> <?= form::checkbox("checkbox[]", p::clean($file_info["path"])) . " " . p::clean($file) ?> </label>
|
||||
</li>
|
||||
<? endforeach ?>
|
||||
</ul>
|
||||
|
||||
Reference in New Issue
Block a user