Fixing all detected XSS vectors in PHP->JS code.

Xss: Rename UNKNOWN back to DIRTY, JS_XSS to DIRTY_JS.
(using a different flag value to highlight potential XSS vectors in JS)
This commit is contained in:
Andy Staudacher
2009-08-29 13:41:18 -07:00
parent 83344b9e7d
commit d5660d2d3e
8 changed files with 56 additions and 50 deletions

View File

@@ -23,7 +23,7 @@
<?= $theme->script("gallery.common.js") ?>
<? /* MSG_CANCEL is required by gallery.dialog.js */ ?>
<script type="text/javascript">
var MSG_CANCEL = "<?= t('Cancel') ?>";
var MSG_CANCEL = "<?= t('Cancel')->for_js() ?>";
</script>
<?= $theme->script("gallery.dialog.js") ?>
<?= $theme->script("superfish/js/superfish.js") ?>