mirror of
https://github.com/silverstripe/silverstripe-framework
synced 2024-09-29 20:59:23 +02:00
BUGFIX: Removed XSS holes (from r94823)
git-svn-id: svn://svn.silverstripe.com/silverstripe/open/modules/sapphire/branches/2.4@96773 467b73ca-7a2a-4603-9d3b-597d59a354a9
This commit is contained in:
parent
d2d32dafa5
commit
25a437e5a0
@ -832,7 +832,7 @@ class ComplexTableField_ItemRequest extends RequestHandler {
|
||||
$message = sprintf(
|
||||
_t('ComplexTableField.SUCCESSEDIT', 'Saved %s %s %s'),
|
||||
$dataObject->singular_name(),
|
||||
'<a href="' . $this->Link() . '">"' . $dataObject->Title . '"</a>',
|
||||
'<a href="' . $this->Link() . '">"' . htmlspecialchars($dataObject->Title, ENT_QUOTES) . '"</a>',
|
||||
$closeLink
|
||||
);
|
||||
|
||||
|
@ -329,7 +329,7 @@ class Group extends DataObject {
|
||||
|
||||
public function TreeTitle() {
|
||||
if($this->hasMethod('alternateTreeTitle')) return $this->alternateTreeTitle();
|
||||
else return $this->Title;
|
||||
else return htmlspecialchars($this->Title, ENT_QUOTES);
|
||||
}
|
||||
|
||||
/**
|
||||
|
Loading…
Reference in New Issue
Block a user