Peter M. Groen / knowledgetree

Commit c66afabbf17368402f12f2739541ff4e03c61b45

Authored by conradverm
1 parent db1c3aac

KTS-2178 

"cross site scripting"
Updated.

Reviewed By: Kevin Fourie

git-svn-id: https://kt-dms.svn.sourceforge.net/svnroot/kt-dms/trunk@6929 c91229c3-7414-0410-bfa2-8a42b809f60b
Inline Side-by-side
Showing 1 changed file with 11 additions and 11 deletions
templates/ktstandard/action/document_links.smarty
  View file @c66afab
1 -<h2><img src="{if $config->get("ui/morphEnabled") == '1'}{$rootUrl}/skins/kts_{$config->get("ui/morphTo")}/title_bullet.png{else}{$rootUrl}/resources/graphics/title_bullet.png{/if}"/>{i18n}Document Links{/i18n}:<br />{$context->oDocument->getName()}</h2> 1 +<h2><img src="{if $config->get("ui/morphEnabled") == '1'}{$rootUrl}/skins/kts_{$config->get("ui/morphTo")}/title_bullet.png{else}{$rootUrl}/resources/graphics/title_bullet.png{/if}"/>{i18n}Document Links{/i18n}:<br />{$context->oDocument->getName()|sanitize}</h2>
2 2
3 <p class="descriptiveText">{i18n}The current links to and from this document are displayed below.{/i18n}</p> 3 <p class="descriptiveText">{i18n}The current links to and from this document are displayed below.{/i18n}</p>
4 4
@@ -12,15 +12,15 @@ @@ -12,15 +12,15 @@
12 <th>{i18n}Relationship{/i18n}</th> 12 <th>{i18n}Relationship{/i18n}</th>
13 </tr> 13 </tr>
14 </thead> 14 </thead>
15 - 15 +
16 <tbody> 16 <tbody>
17 17
18 18
19 19
20 20
21 21
22 -{if $links_from || $links_to}  
23 - 22 +{if $links_from || $links_to}
  23 +
24 {foreach from=$links_from item=link} 24 {foreach from=$links_from item=link}
25 25
26 {assign var="type" value=$link->getLinkType()} 26 {assign var="type" value=$link->getLinkType()}
@@ -35,12 +35,12 @@ @@ -35,12 +35,12 @@
35 {/if} 35 {/if}
36 </td> 36 </td>
37 37
38 - <td><a href="{"viewDocument"|generateControllerUrl}&qs[fDocumentId]={$target->getId()}&qs[action]=main">{$target->getName()}</a></td> 38 + <td><a href="{"viewDocument"|generateControllerUrl}&qs[fDocumentId]={$target->getId()}&qs[action]=main">{$target->getName()|sanitize}</a></td>
39 <td>{$type->getName()}</td> 39 <td>{$type->getName()}</td>
40 <td>{i18n}Linked <b>from</b> this document{/i18n}</td> 40 <td>{i18n}Linked <b>from</b> this document{/i18n}</td>
41 </tr> 41 </tr>
42 -  
43 -{/foreach} 42 +
  43 +{/foreach}
44 44
45 {foreach from=$links_to item=link} 45 {foreach from=$links_to item=link}
46 46
@@ -55,13 +55,13 @@ @@ -55,13 +55,13 @@
55 &nbsp; 55 &nbsp;
56 {/if} 56 {/if}
57 </td> 57 </td>
58 -  
59 - <td><a href="{"viewDocument"|generateControllerUrl}&qs[fDocumentId]={$target->getId()}&qs[action]=main">{$target->getName()}</a></td> 58 +
  59 + <td><a href="{"viewDocument"|generateControllerUrl}&qs[fDocumentId]={$target->getId()}&qs[action]=main">{$target->getName()|sanitize}</a></td>
60 <td>{$type->getName()}</td> 60 <td>{$type->getName()}</td>
61 <td>{i18n}Links <b>to</b> this document{/i18n}</td> 61 <td>{i18n}Links <b>to</b> this document{/i18n}</td>
62 </tr> 62 </tr>
63 -  
64 -{/foreach} 63 +
  64 +{/foreach}
65 65
66 66
67 {else} 67 {else}