Commit 58d33960a25ea8ed33a5e5cdfb5bffa21898569c

Authored by Conrad Vermeulen
1 parent ce389c68

KTS-2178

"cross site scripting"
Implemented.

Reviewed By: Kevin Fourie

git-svn-id: https://kt-dms.svn.sourceforge.net/svnroot/kt-dms/trunk@6997 c91229c3-7414-0410-bfa2-8a42b809f60b
templates/kt3/minimal_page.smarty
... ... @@ -2,7 +2,7 @@
2 2 "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
3 3 <html>
4 4 <head>
5   - <title>{$page->title} | {$page->systemName}</title>
  5 + <title>{$page->title|sanitize} | {$page->systemName}</title>
6 6  
7 7 <!-- CSS Files. -->
8 8 {foreach item=sResourceURL from=$page->getCSSResources()}
... ...
templates/kt3/standard_page.smarty
... ... @@ -2,7 +2,7 @@
2 2 "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
3 3 <html>
4 4 <head>
5   - <title>{$page->title}{if ($page->secondary_title != null)} &mdash; {$page->secondary_title}{/if} | {$page->systemName}</title>
  5 + <title>{$page->title|sanitize}{if ($page->secondary_title != null)} &mdash; {$page->secondary_title|sanitize}{/if} | {$page->systemName}</title>
6 6  
7 7 <!-- CSS Files. -->
8 8  
... ...