mirror of
https://github.com/silverstripe/silverstripe-cms
synced 2024-10-22 08:05:56 +02:00
BUGFIX: Removed XSS holes (from r94822) (from r96822)
git-svn-id: svn://svn.silverstripe.com/silverstripe/open/modules/cms/trunk@102682 467b73ca-7a2a-4603-9d3b-597d59a354a9
This commit is contained in:
parent
feeb1e40fa
commit
186e43e60b
@ -349,7 +349,7 @@ class MemberTableField extends ComplexTableField {
|
|||||||
$message = sprintf(
|
$message = sprintf(
|
||||||
_t('ComplexTableField.SUCCESSADD', 'Added %s %s %s'),
|
_t('ComplexTableField.SUCCESSADD', 'Added %s %s %s'),
|
||||||
$childData->singular_name(),
|
$childData->singular_name(),
|
||||||
'<a href="' . $this->Link() . '">' . $childData->Title . '</a>',
|
'<a href="' . $this->Link() . '">' . htmlspecialchars($childData->Title, ENT_QUOTES) . '</a>',
|
||||||
$closeLink
|
$closeLink
|
||||||
);
|
);
|
||||||
$form->sessionMessage($message, 'good');
|
$form->sessionMessage($message, 'good');
|
||||||
|
Loading…
Reference in New Issue
Block a user