From c66afabbf17368402f12f2739541ff4e03c61b45 Mon Sep 17 00:00:00 2001
From: conradverm <conradverm@c91229c3-7414-0410-bfa2-8a42b809f60b>
Date: Fri, 13 Jul 2007 15:11:58 +0000
Subject: [PATCH] KTS-2178 "cross site scripting" Updated.

---
 templates/ktstandard/action/document_links.smarty | 22 +++++++++++-----------
 1 file changed, 11 insertions(+), 11 deletions(-)

diff --git a/templates/ktstandard/action/document_links.smarty b/templates/ktstandard/action/document_links.smarty
index 46ad096..34c1281 100644
--- a/templates/ktstandard/action/document_links.smarty
+++ b/templates/ktstandard/action/document_links.smarty
@@ -1,4 +1,4 @@
-<h2><img src="{if $config->get("ui/morphEnabled") == '1'}{$rootUrl}/skins/kts_{$config->get("ui/morphTo")}/title_bullet.png{else}{$rootUrl}/resources/graphics/title_bullet.png{/if}"/>{i18n}Document Links{/i18n}:<br />{$context->oDocument->getName()}</h2>
+<h2><img src="{if $config->get("ui/morphEnabled") == '1'}{$rootUrl}/skins/kts_{$config->get("ui/morphTo")}/title_bullet.png{else}{$rootUrl}/resources/graphics/title_bullet.png{/if}"/>{i18n}Document Links{/i18n}:<br />{$context->oDocument->getName()|sanitize}</h2>
 
 <p class="descriptiveText">{i18n}The current links to and from this document are displayed below.{/i18n}</p>
 
@@ -12,15 +12,15 @@
             <th>{i18n}Relationship{/i18n}</th>
         </tr>
     </thead>
-    
+
     <tbody>
 
 
 
 
 
-{if $links_from || $links_to}    
-    
+{if $links_from || $links_to}
+
 {foreach from=$links_from item=link}
 
 {assign var="type" value=$link->getLinkType()}
@@ -35,12 +35,12 @@
             {/if}
             </td>
 
-            <td><a href="{"viewDocument"|generateControllerUrl}&qs[fDocumentId]={$target->getId()}&qs[action]=main">{$target->getName()}</a></td> 
+            <td><a href="{"viewDocument"|generateControllerUrl}&qs[fDocumentId]={$target->getId()}&qs[action]=main">{$target->getName()|sanitize}</a></td>
             <td>{$type->getName()}</td>
             <td>{i18n}Linked <b>from</b> this document{/i18n}</td>
         </tr>
-        
-{/foreach}      
+
+{/foreach}
 
 {foreach from=$links_to item=link}
 
@@ -55,13 +55,13 @@
                 &nbsp;
             {/if}
             </td>
-            
-            <td><a href="{"viewDocument"|generateControllerUrl}&qs[fDocumentId]={$target->getId()}&qs[action]=main">{$target->getName()}</a></td> 
+
+            <td><a href="{"viewDocument"|generateControllerUrl}&qs[fDocumentId]={$target->getId()}&qs[action]=main">{$target->getName()|sanitize}</a></td>
             <td>{$type->getName()}</td>
             <td>{i18n}Links <b>to</b> this document{/i18n}</td>
         </tr>
-        
-{/foreach}      
+
+{/foreach}
 
 
 {else}
--
libgit2 0.21.4