From 001daff69eee49b1c87699c45fd6014451f10e02 Mon Sep 17 00:00:00 2001
From: conradverm <conradverm@c91229c3-7414-0410-bfa2-8a42b809f60b>
Date: Fri, 13 Jul 2007 15:21:29 +0000
Subject: [PATCH] KTS-2178 "cross site scripting" Updated.

---
 templates/ktcore/folder/bulkUpload.smarty | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/templates/ktcore/folder/bulkUpload.smarty b/templates/ktcore/folder/bulkUpload.smarty
index 82cb813..1ed3ce6 100644
--- a/templates/ktcore/folder/bulkUpload.smarty
+++ b/templates/ktcore/folder/bulkUpload.smarty
@@ -12,9 +12,9 @@
 {capture assign=sJavascript}
 {literal}
 function swapInItem(elementId, req) {
-    
+
     var cp = getElement(elementId);
-    
+
     cp.innerHTML = req.responseText;
     initialiseConditionalFieldsets();
 }
@@ -28,8 +28,8 @@ function swapElementFromRequest(elementId, url) {
     var cp = getElement(elementId);
     cp.innerHTML=_("loading...");
     deff.addCallback(partial(swapInItem, elementId));
-    
-    
+
+
 }
 
 function getMetadataForType(id) {
@@ -54,7 +54,7 @@ addLoadEvent(startupMetadata);
 {/capture}
 {$context->oPage->requireJSStandalone($sJavascript)}
 
-<h2><img src="{if $config->get("ui/morphEnabled") == '1'}{$rootUrl}/skins/kts_{$config->get("ui/morphTo")}/title_bullet.png{else}{$rootUrl}/resources/graphics/title_bullet.png{/if}"/>{i18n}Upload files into{/i18n}:<br />{$context->oFolder->getName()}</h2>
+<h2><img src="{if $config->get("ui/morphEnabled") == '1'}{$rootUrl}/skins/kts_{$config->get("ui/morphTo")}/title_bullet.png{else}{$rootUrl}/resources/graphics/title_bullet.png{/if}"/>{i18n}Upload files into{/i18n}:<br />{$context->oFolder->getName()|sanitize}</h2>
 
 <form method="POST" action="{$smarty.server.PHP_SELF|addQueryString:"postExpected=1&fFolderId="}{$context->oFolder->getId()}" enctype="multipart/form-data">
 <fieldset><legend>{i18n}Bulk upload{/i18n}</legend>
--
libgit2 0.21.4