Making default scaffold views html escape contents. Refs #1186

cakephp · Oct 24, 2010 · eb3cc3d · eb3cc3d
1 parent bf7b8b0
commit eb3cc3d
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/cake/libs/view/scaffolds/index.ctp b/cake/libs/view/scaffolds/index.ctp
@@ -47,7 +47,7 @@ echo "\n";
 				}
 			}
 			if ($isKey !== true) {
-				echo "\t\t<td>\n\t\t\t" . ${$singularVar}[$modelClass][$_field] . " \n\t\t</td>\n";
+				echo "\t\t<td>" . h(${$singularVar}[$modelClass][$_field]) . "</td>\n";
 			}
 		}
 

diff --git a/cake/libs/view/scaffolds/view.ctp b/cake/libs/view/scaffolds/view.ctp
@@ -40,7 +40,7 @@ foreach ($scaffoldFields as $_field) {
 	}
 	if ($isKey !== true) {
 		echo "\t\t<dt{$class}>" . Inflector::humanize($_field) . "</dt>\n";
-		echo "\t\t<dd{$class}>\n\t\t\t{${$singularVar}[$modelClass][$_field]}\n&nbsp;\t\t</dd>\n";
+		echo "\t\t<dd{$class}>" . h(${$singularVar}[$modelClass][$_field]) . "&nbsp;</dd>\n";
 	}
 }
 ?>