[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Noalyss-commit] [noalyss] 05/09: HtmlInput::get_node_attribute protect
From: |
dwm |
Subject: |
[Noalyss-commit] [noalyss] 05/09: HtmlInput::get_node_attribute protect the attribute with htmlentity |
Date: |
Fri, 9 Aug 2024 15:18:15 -0400 (EDT) |
sparkyx pushed a commit to branch unstable
in repository noalyss.
commit a596b020c43e85b9da3d57a591bbc853c64170c6
Author: sparkyx <danydb@noalyss.eu>
AuthorDate: Fri Aug 9 14:02:53 2024 +0200
HtmlInput::get_node_attribute protect the attribute with htmlentity
---
include/lib/html_input.class.php | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/include/lib/html_input.class.php b/include/lib/html_input.class.php
index 7fc047a50..4a5174bc4 100755
--- a/include/lib/html_input.class.php
+++ b/include/lib/html_input.class.php
@@ -1210,7 +1210,7 @@ class HtmlInput
for ($i=0; $i<$nb_attribute; $i++)
{
$r.=sprintf(' %s="%s" ', $this->attribute[$i][0],
- $this->attribute[$i][1]);
+ htmlentities($this->attribute[$i][1]));
}
return $r;
}
- [Noalyss-commit] [noalyss] branch unstable updated (451b9cb7c -> 99fbccdf1), dwm, 2024/08/09
- [Noalyss-commit] [noalyss] 01/09: Bug : fix : ITVA does not change the label, dwm, 2024/08/09
- [Noalyss-commit] [noalyss] 03/09: CFGPRO : detail menu : add button close, dwm, 2024/08/09
- [Noalyss-commit] [noalyss] 02/09: CFGMENU : cosmetic, dwm, 2024/08/09
- [Noalyss-commit] [noalyss] 04/09: cfgplugin : activate plugin with simple click not confirmation needed, dwm, 2024/08/09
- [Noalyss-commit] [noalyss] 06/09: CMCARD : template of card, drag'n drop to order the attributes, dwm, 2024/08/09
- [Noalyss-commit] [noalyss] 07/09: Change menu code , replace CFG by C0 or C1 , new standard, dwm, 2024/08/09
- [Noalyss-commit] [noalyss] 08/09: Fix : gettext for empty string calls the file header, dwm, 2024/08/09
- [Noalyss-commit] [noalyss] 09/09: Code clean : remove debug info, dwm, 2024/08/09
- [Noalyss-commit] [noalyss] 05/09: HtmlInput::get_node_attribute protect the attribute with htmlentity,
dwm <=