Commit 58d33960a25ea8ed33a5e5cdfb5bffa21898569c

Authored by Conrad Vermeulen
1 parent ce389c68

KTS-2178

"cross site scripting"
Implemented.

Reviewed By: Kevin Fourie

git-svn-id: https://kt-dms.svn.sourceforge.net/svnroot/kt-dms/trunk@6997 c91229c3-7414-0410-bfa2-8a42b809f60b
templates/kt3/minimal_page.smarty
@@ -2,7 +2,7 @@ @@ -2,7 +2,7 @@
2 "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"> 2 "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
3 <html> 3 <html>
4 <head> 4 <head>
5 - <title>{$page->title} | {$page->systemName}</title> 5 + <title>{$page->title|sanitize} | {$page->systemName}</title>
6 6
7 <!-- CSS Files. --> 7 <!-- CSS Files. -->
8 {foreach item=sResourceURL from=$page->getCSSResources()} 8 {foreach item=sResourceURL from=$page->getCSSResources()}
templates/kt3/standard_page.smarty
@@ -2,7 +2,7 @@ @@ -2,7 +2,7 @@
2 "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"> 2 "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
3 <html> 3 <html>
4 <head> 4 <head>
5 - <title>{$page->title}{if ($page->secondary_title != null)} &mdash; {$page->secondary_title}{/if} | {$page->systemName}</title> 5 + <title>{$page->title|sanitize}{if ($page->secondary_title != null)} &mdash; {$page->secondary_title|sanitize}{/if} | {$page->systemName}</title>
6 6
7 <!-- CSS Files. --> 7 <!-- CSS Files. -->
8 8