From fd74f897fa7ac416d1db24500288a1501d8fbc43 Mon Sep 17 00:00:00 2001
From: conradverm <conradverm@c91229c3-7414-0410-bfa2-8a42b809f60b>
Date: Fri, 13 Jul 2007 15:15:59 +0000
Subject: [PATCH] KTS-2178 "cross site scripting" Updated.

---
 templates/ktcore/bulk_action_complete.smarty | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/templates/ktcore/bulk_action_complete.smarty b/templates/ktcore/bulk_action_complete.smarty
index ca2d3b1..3a624a3 100644
--- a/templates/ktcore/bulk_action_complete.smarty
+++ b/templates/ktcore/bulk_action_complete.smarty
@@ -1,4 +1,4 @@
-<h2><img src="{if $config->get("ui/morphEnabled") == '1'}{$rootUrl}/skins/kts_{$config->get("ui/morphTo")}/title_bullet.png{else}{$rootUrl}/resources/graphics/title_bullet.png{/if}"/>{$context->getDisplayName()}</h2>
+<h2><img src="{if $config->get("ui/morphEnabled") == '1'}{$rootUrl}/skins/kts_{$config->get("ui/morphTo")}/title_bullet.png{else}{$rootUrl}/resources/graphics/title_bullet.png{/if}"/>{$context->getDisplayName()|sanitize}</h2>
 
 <p class="descriptiveText">{i18n}These are the results of the bulk action{/i18n}:</p>
 
@@ -17,8 +17,8 @@
 <tbody>
 {foreach from=$list.folders item=item}
     <tr class="{cycle values=even,odd}">
-        <td>{$item.0}</td>
-        <td>{$item.1}</td>
+        <td>{$item.0|sanitize}</td>
+        <td>{$item.1|sanitize}</td>
     </tr>
 {/foreach}
 </tbody>
@@ -42,8 +42,8 @@
 
 {foreach from=$list.documents item=item}
     <tr class="{cycle values=even,odd}">
-        <td>{$item.0}</td>
-        <td>{$item.1}</td>
+        <td>{$item.0|sanitize}</td>
+        <td>{$item.1|sanitize}</td>
     </tr>
 {/foreach}
 </tbody>
--
libgit2 0.21.4