From 455ec4c6722fdfbdc412e99725d2f9d102cfcdbe Mon Sep 17 00:00:00 2001
From: conradverm <conradverm@c91229c3-7414-0410-bfa2-8a42b809f60b>
Date: Fri, 13 Jul 2007 15:19:10 +0000
Subject: [PATCH] KTS-2178 "cross site scripting" Updated.

---
 templates/ktcore/forms/widgets/collection.smarty | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/templates/ktcore/forms/widgets/collection.smarty b/templates/ktcore/forms/widgets/collection.smarty
index 39cde5c..2d3c5f0 100644
--- a/templates/ktcore/forms/widgets/collection.smarty
+++ b/templates/ktcore/forms/widgets/collection.smarty
@@ -5,7 +5,7 @@
 <link rel="stylesheet" type="text/css" href="{$rootUrl}/resources/css/kt-framing.css" />
 <link rel="stylesheet" type="text/css" href="{$rootUrl}/resources/css/kt-contenttypes.css" />
 <link rel="stylesheet" type="text/css" href="{$rootUrl}/resources/css/kt-headings.css" />
-<!--[if lt IE 7]><style type="text/css" media="all">@import url({$rootUrl}/resources/css/kt-ie-icons.css);</style><![endif]-->    
+<!--[if lt IE 7]><style type="text/css" media="all">@import url({$rootUrl}/resources/css/kt-ie-icons.css);</style><![endif]-->
 
 <script type="text/javascript" src="{$rootUrl}/thirdpartyjs/MochiKit/Base.js"> </script>
 <script type="text/javascript" src="{$rootUrl}/thirdpartyjs/MochiKit/Iter.js"> </script>
@@ -25,7 +25,7 @@
 <input type="hidden" name="{$targetname}" value="{$folder->getId()}" />
 
 {foreach from=$breadcrumbs item=breadcrumb name=bc}
-<a href="{$breadcrumb.url}">{$breadcrumb.name}</a>
+<a href="{$breadcrumb.url}">{$breadcrumb.name|sanitize}</a>
 {if !$smarty.foreach.bc.last}
 &raquo;
 {/if}
--
libgit2 0.21.4