Abe Hassan (burr86) wrote in changelog,
Abe Hassan
burr86
changelog

[livejournal] r12393: * Escape HTML on the titles of stock ans...

Committer: ahassan
* Escape HTML on the titles of stock answers

http://rt.livejournal.org/Ticket/Display.html?id=554

U   trunk/htdocs/support/see_request.bml
U   trunk/htdocs/support/stock_answers.bml
Modified: trunk/htdocs/support/see_request.bml
===================================================================
--- trunk/htdocs/support/see_request.bml	2007-08-31 22:21:51 UTC (rev 12392)
+++ trunk/htdocs/support/see_request.bml	2007-08-31 22:29:27 UTC (rev 12393)
@@ -787,7 +787,7 @@
             $ret .= "<option value='-1' selected>( select canned to insert )</option>\n";
             $i = 0;
             foreach my $row (@$rows) {
-                $ret .= "<option value='$i'>$row->[0]</option>\n";
+                $ret .= "<option value='$i'>" . LJ::ehtml($row->[0]) . "</option>\n";
                 $i++;
             }
             $ret .= "</input>\n";

Modified: trunk/htdocs/support/stock_answers.bml
===================================================================
--- trunk/htdocs/support/stock_answers.bml	2007-08-31 22:21:51 UTC (rev 12392)
+++ trunk/htdocs/support/stock_answers.bml	2007-08-31 22:29:27 UTC (rev 12393)
@@ -204,7 +204,7 @@
                 }
                 $ret .= "</form></li>";
             } else {
-                $ret .= "<li><a href='$self?spcatid=$catid&ansid=$ansid'>$subj</a></li>";
+                $ret .= "<li><a href='$self?spcatid=$catid&ansid=$ansid'>" . LJ::ehtml($subj) . "</a></li>";
             }
         }
         $ret .= "</ul>";

Subscribe

  • Post a new comment

    Error

    Anonymous comments are disabled in this journal

    default userpic

    Your reply will be screened

    Your IP address will be recorded 

  • 0 comments