Commit f6ed52d7b2cf1c50ae30f821c39e891a1c2cb277
1 parent
4dbe6432
Merged in from DEV trunk...
KTC-177 "RSS feed appears wrong when launched from the 'Actions on this folder' when the folder has the internationalisation string as its name or the name of any of its subfolders." Fixed. added html encoding to title and removed sanitize from template... Committed By: Jalaloedien Abrahams Reviewed By: Conrad Vermeulen git-svn-id: https://kt-dms.svn.sourceforge.net/svnroot/kt-dms/STABLE/trunk@7034 c91229c3-7414-0410-bfa2-8a42b809f60b
Showing
3 changed files
with
4 additions
and
4 deletions
lib/storage/ondiskhashedstoragemanager.inc.php
| @@ -148,7 +148,7 @@ class KTOnDiskHashedStorageManager extends KTStorageManager { | @@ -148,7 +148,7 @@ class KTOnDiskHashedStorageManager extends KTStorageManager { | ||
| 148 | $oUrlEncodedFileName = $oDocument->getFileName( ); | 148 | $oUrlEncodedFileName = $oDocument->getFileName( ); |
| 149 | $browser = $_SERVER['HTTP_USER_AGENT']; | 149 | $browser = $_SERVER['HTTP_USER_AGENT']; |
| 150 | if ( strpos( strtoupper( $browser), 'MSIE') !== false) { | 150 | if ( strpos( strtoupper( $browser), 'MSIE') !== false) { |
| 151 | - $oUrlEncodedFileName = rawurlencode( $oUrlEncodedFileName); | 151 | + $oUrlEncodedFileName = htmlentities($oUrlEncodedFileName, ENT_QUOTES, 'UTF-8'); |
| 152 | } | 152 | } |
| 153 | //set the correct headers | 153 | //set the correct headers |
| 154 | header("Content-Type: " . $mimetype); | 154 | header("Content-Type: " . $mimetype); |
plugins/rssplugin/KTrss.inc.php
| @@ -293,7 +293,7 @@ class KTrss{ | @@ -293,7 +293,7 @@ class KTrss{ | ||
| 293 | $sTypeSelect = 'document.transactionhistory&fDocumentId'; | 293 | $sTypeSelect = 'document.transactionhistory&fDocumentId'; |
| 294 | } | 294 | } |
| 295 | $feed .= "<item>\n" . | 295 | $feed .= "<item>\n" . |
| 296 | - "<title>".KTrss::rss_sanitize($aItems[0][0][name],false)."</title>\n" . | 296 | + "<title>".htmlentities(KTrss::rss_sanitize($aItems[0][0][name],false), ENT_QUOTES, 'UTF-8')."</title>\n" . |
| 297 | "<link>".$hostPath."action.php?kt_path_info=ktcore.actions.".$sTypeSelect."=".$aItems[0][0]['id']."</link>\n" . | 297 | "<link>".$hostPath."action.php?kt_path_info=ktcore.actions.".$sTypeSelect."=".$aItems[0][0]['id']."</link>\n" . |
| 298 | "<description>\n" . | 298 | "<description>\n" . |
| 299 | "<table border='0' width='90%'>\n". | 299 | "<table border='0' width='90%'>\n". |
| @@ -309,7 +309,7 @@ class KTrss{ | @@ -309,7 +309,7 @@ class KTrss{ | ||
| 309 | "<hr>\n". | 309 | "<hr>\n". |
| 310 | "<table width='95%'>\n". | 310 | "<table width='95%'>\n". |
| 311 | "<tr>\n". | 311 | "<tr>\n". |
| 312 | - "<td>Filename: ".KTrss::rss_sanitize($aItems[0][0][filename] )."</td>\n". | 312 | + "<td>Filename: ".KTrss::rss_sanitize($aItems[0][0][filename])."</td>\n". |
| 313 | "<td>\n". | 313 | "<td>\n". |
| 314 | "</tr>\n". | 314 | "</tr>\n". |
| 315 | "<tr>\n". | 315 | "<tr>\n". |
plugins/rssplugin/templates/RSSPlugin/dashlet.smarty
| @@ -26,7 +26,7 @@ | @@ -26,7 +26,7 @@ | ||
| 26 | <table width='90%'> | 26 | <table width='90%'> |
| 27 | {section name=i start=0 loop=$itemcount} | 27 | {section name=i start=0 loop=$itemcount} |
| 28 | <tr> | 28 | <tr> |
| 29 | - <td><strong><a href='{$internalrss.items[i].link}'>{$internalrss.items[i].title|sanitize}</a><strong></td> | 29 | + <td><strong><a href='{$internalrss.items[i].link}'>{$internalrss.items[i].title}</a><strong></td> |
| 30 | </tr> | 30 | </tr> |
| 31 | <tr> | 31 | <tr> |
| 32 | <td>{$internalrss.items[i].description}</td> | 32 | <td>{$internalrss.items[i].description}</td> |