Commit 390811f597483ece4b8a1935242af445af6ea7c6
1 parent
6e301e40
KTS-2178
"cross site scripting" Updated. Reviewed By: Kevin Fourie git-svn-id: https://kt-dms.svn.sourceforge.net/svnroot/kt-dms/trunk@6954 c91229c3-7414-0410-bfa2-8a42b809f60b
Showing
1 changed file
with
2 additions
and
2 deletions
templates/ktcore/assist/assist_notification_details.smarty
| @@ -6,9 +6,9 @@ | @@ -6,9 +6,9 @@ | ||
| 6 | 6 | ||
| 7 | <dl> | 7 | <dl> |
| 8 | <dt>{i18n}Subject{/i18n}</dt> | 8 | <dt>{i18n}Subject{/i18n}</dt> |
| 9 | -<dd>{$subject}</dd> | 9 | +<dd>{$subject|sanitize}</dd> |
| 10 | <dt>{i18n}Details{/i18n}</dt> | 10 | <dt>{i18n}Details{/i18n}</dt> |
| 11 | -<dd>{$details} </dd> | 11 | +<dd>{$details|sanitize} </dd> |
| 12 | </dl> | 12 | </dl> |
| 13 | 13 | ||
| 14 | <div class="actionoptions"> | 14 | <div class="actionoptions"> |