mirror of
https://github.com/Pathduck/gallery3.git
synced 2026-08-23 07:15:50 -04:00
Refactor all calls of p::clean() to SafeString::of() and p::purify() to SafeString::purify().
Removing any p::clean() calls for arguments to t() and t2() since their args are wrapped in a SafeString anyway.
This commit is contained in:
@@ -51,7 +51,7 @@ class Admin_Users_Controller extends Controller {
|
||||
$user->save();
|
||||
module::event("user_add_form_admin_completed", $user, $form);
|
||||
|
||||
message::success(t("Created user %user_name", array("user_name" => p::clean($user->name))));
|
||||
message::success(t("Created user %user_name", array("user_name" => $user->name)));
|
||||
print json_encode(array("result" => "success"));
|
||||
} else {
|
||||
print json_encode(array("result" => "error",
|
||||
@@ -84,7 +84,7 @@ class Admin_Users_Controller extends Controller {
|
||||
"form" => $form->__toString()));
|
||||
}
|
||||
|
||||
$message = t("Deleted user %user_name", array("user_name" => p::clean($name)));
|
||||
$message = t("Deleted user %user_name", array("user_name" => $name));
|
||||
log::success("user", $message);
|
||||
message::success($message);
|
||||
print json_encode(array("result" => "success"));
|
||||
@@ -142,7 +142,7 @@ class Admin_Users_Controller extends Controller {
|
||||
$user->save();
|
||||
module::event("user_edit_form_admin_completed", $user, $form);
|
||||
|
||||
message::success(t("Changed user %user_name", array("user_name" => p::clean($user->name))));
|
||||
message::success(t("Changed user %user_name", array("user_name" => $user->name)));
|
||||
print json_encode(array("result" => "success"));
|
||||
} else {
|
||||
print json_encode(array("result" => "error",
|
||||
@@ -204,7 +204,7 @@ class Admin_Users_Controller extends Controller {
|
||||
$group = group::create($new_name);
|
||||
$group->save();
|
||||
message::success(
|
||||
t("Created group %group_name", array("group_name" => p::clean($group->name))));
|
||||
t("Created group %group_name", array("group_name" => $group->name)));
|
||||
print json_encode(array("result" => "success"));
|
||||
} else {
|
||||
print json_encode(array("result" => "error",
|
||||
@@ -233,7 +233,7 @@ class Admin_Users_Controller extends Controller {
|
||||
"form" => $form->__toString()));
|
||||
}
|
||||
|
||||
$message = t("Deleted group %group_name", array("group_name" => p::clean($name)));
|
||||
$message = t("Deleted group %group_name", array("group_name" => $name));
|
||||
log::success("group", $message);
|
||||
message::success($message);
|
||||
print json_encode(array("result" => "success"));
|
||||
@@ -271,11 +271,11 @@ class Admin_Users_Controller extends Controller {
|
||||
$group->name = $form->edit_group->inputs["name"]->value;
|
||||
$group->save();
|
||||
message::success(
|
||||
t("Changed group %group_name", array("group_name" => p::clean($group->name))));
|
||||
t("Changed group %group_name", array("group_name" => $group->name)));
|
||||
print json_encode(array("result" => "success"));
|
||||
} else {
|
||||
message::error(
|
||||
t("Failed to change group %group_name", array("group_name" => p::clean($group->name))));
|
||||
t("Failed to change group %group_name", array("group_name" => $group->name)));
|
||||
print json_encode(array("result" => "error",
|
||||
"form" => $form->__toString()));
|
||||
}
|
||||
|
||||
@@ -63,7 +63,7 @@ class Login_Controller extends Controller {
|
||||
log::warning(
|
||||
"user",
|
||||
t("Failed login for %name",
|
||||
array("name" => p::clean($form->login->inputs["name"]->value))));
|
||||
array("name" => $form->login->inputs["name"]->value)));
|
||||
$form->login->inputs["name"]->add_error("invalid_login", 1);
|
||||
$valid = false;
|
||||
}
|
||||
@@ -71,7 +71,7 @@ class Login_Controller extends Controller {
|
||||
|
||||
if ($valid) {
|
||||
user::login($user);
|
||||
log::info("user", t("User %name logged in", array("name" => p::clean($user->name))));
|
||||
log::info("user", t("User %name logged in", array("name" => $user->name)));
|
||||
}
|
||||
|
||||
// Either way, regenerate the session id to avoid session trapping
|
||||
|
||||
@@ -23,8 +23,8 @@ class Logout_Controller extends Controller {
|
||||
|
||||
$user = user::active();
|
||||
user::logout();
|
||||
log::info("user", t("User %name logged out", array("name" => p::clean($user->name))),
|
||||
html::anchor("user/$user->id", p::clean($user->name)));
|
||||
log::info("user", t("User %name logged out", array("name" => $user->name)),
|
||||
html::anchor("user/$user->id", SafeString::of($user->name)));
|
||||
if ($continue_url = $this->input->get("continue")) {
|
||||
$item = url::get_item_from_uri($continue_url);
|
||||
if (access::can("view", $item)) {
|
||||
|
||||
@@ -74,7 +74,7 @@ class Password_Controller extends Controller {
|
||||
|
||||
log::success(
|
||||
"user",
|
||||
t("Password reset email sent for user %name", array("name" => p::clean($user->name))));
|
||||
t("Password reset email sent for user %name", array("name" => $user->name)));
|
||||
} else {
|
||||
// Don't include the username here until you're sure that it's XSS safe
|
||||
log::warning(
|
||||
|
||||
Reference in New Issue
Block a user