Commit 58d33960a25ea8ed33a5e5cdfb5bffa21898569c
1 parent
ce389c68
KTS-2178
"cross site scripting" Implemented. Reviewed By: Kevin Fourie git-svn-id: https://kt-dms.svn.sourceforge.net/svnroot/kt-dms/trunk@6997 c91229c3-7414-0410-bfa2-8a42b809f60b
Showing
2 changed files
with
2 additions
and
2 deletions
templates/kt3/minimal_page.smarty
| ... | ... | @@ -2,7 +2,7 @@ |
| 2 | 2 | "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"> |
| 3 | 3 | <html> |
| 4 | 4 | <head> |
| 5 | - <title>{$page->title} | {$page->systemName}</title> | |
| 5 | + <title>{$page->title|sanitize} | {$page->systemName}</title> | |
| 6 | 6 | |
| 7 | 7 | <!-- CSS Files. --> |
| 8 | 8 | {foreach item=sResourceURL from=$page->getCSSResources()} | ... | ... |
templates/kt3/standard_page.smarty
| ... | ... | @@ -2,7 +2,7 @@ |
| 2 | 2 | "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"> |
| 3 | 3 | <html> |
| 4 | 4 | <head> |
| 5 | - <title>{$page->title}{if ($page->secondary_title != null)} — {$page->secondary_title}{/if} | {$page->systemName}</title> | |
| 5 | + <title>{$page->title|sanitize}{if ($page->secondary_title != null)} — {$page->secondary_title|sanitize}{/if} | {$page->systemName}</title> | |
| 6 | 6 | |
| 7 | 7 | <!-- CSS Files. --> |
| 8 | 8 | ... | ... |