tonyair
/
silverstripe-framework
mirror of https://github.com/silverstripe/silverstripe-framework
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

FIX We still need XML escaping on href attributes in HTML4Value

This commit is contained in:
Hamish Friedlander 2013-04-18 09:13:24 +12:00
parent fb17f43878
commit 8d26bdbd2e
2 changed files with 10 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
model/HTMLValue.php
View File

@ -52,7 +52,7 @@ abstract class SS_HTMLValue extends ViewableData {
// Then replace the saved attributes with their original versions
$res = preg_replace_callback('/__HTMLVALUE_(\d+)/', function($matches) use ($attrs) {
return $attrs[$matches[0]];
return Convert::raw2att($attrs[$matches[0]]);
}, $res);
return $res;

9
tests/integration/HTML4ValueTest.php
View File

@ -58,4 +58,13 @@ class SS_HTML4ValueTest extends SapphireTest {
);
}
public function testAttributeEscaping() {
$value = new SS_HTML4Value();
$value->setContent('<a href="[]"></a>');
$this->assertEquals('<a href="[]"></a>', $value->getContent(), "'[' character isn't escaped");
$value->setContent('<a href="&quot;"></a>');
$this->assertEquals('<a href="&quot;"></a>', $value->getContent(), "'\"' character is escaped");
}
}