Peter M. Groen / knowledgetree

Commit db1c3aac9d2936830b4eb5718810c01b88d0dc9e

Authored by conradverm
1 parent 9a6e2e8f

KTS-2178 

"cross site scripting"
Updated.

Reviewed By: Kevin Fourie

git-svn-id: https://kt-dms.svn.sourceforge.net/svnroot/kt-dms/trunk@6928 c91229c3-7414-0410-bfa2-8a42b809f60b
Inline Side-by-side
Showing 1 changed file with 3 additions and 3 deletions
templates/ktstandard/links/links_viewlet.smarty
  View file @db1c3aa
... ... @@ -3,7 +3,7 @@
3 3 <h3>{i18n}Links from this document{/i18n}</h3>
4 4 <ul>
5 5 {foreach from=$links_from item=info}
6   - <li class="descriptiveText">{i18n}from{/i18n} <a href="{$info.url}" title="{$info.description}">{$info.name}</a> ({$info.type})</li>
  6 + <li class="descriptiveText">{i18n}from{/i18n} <a href="{$info.url}" title="{$info.description}">{$info.name|sanitize}</a> ({$info.type})</li>
7 7 {/foreach}
8 8 </ul>
9 9 {/if}
... ... @@ -12,9 +12,9 @@
12 12 <h3>{i18n}Links to this document{/i18n}</h3>
13 13 <ul>
14 14 {foreach from=$links_to item=info}
15   - <li class="descriptiveText">{i18n}to{/i18n} <a href="{$info.url}" title="{$info.description}">{$info.name}</a> ({$info.type})</li>
  15 + <li class="descriptiveText">{i18n}to{/i18n} <a href="{$info.url}" title="{$info.description}">{$info.name|sanitize}</a> ({$info.type})</li>
16 16 {/foreach}
17 17 </ul>
18 18 {/if}
19   -
  19 +
20 20 </div>
... ...