Escape missing variables

refs #8903
Icinga · May 7, 2015 · 5477a2f · 5477a2f
1 parent e6740c5
commit 5477a2f
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/modules/monitoring/application/views/scripts/list/comments.phtml b/modules/monitoring/application/views/scripts/list/comments.phtml
@@ -64,7 +64,7 @@ if (count($comments) === 0) {
         <?php endif ?>
           <br>
           <?= $this->icon('comment', $this->translate('Comment')); ?> <?= isset($comment->author)
-            ? '[' . $comment->author . '] '
+            ? '[' . $this->escape($comment->author) . '] '
             : '';
           ?><?= $this->escape($comment->comment); ?>
           <br>

diff --git a/modules/monitoring/application/views/scripts/partials/comment/comment-detail.phtml b/modules/monitoring/application/views/scripts/partials/comment/comment-detail.phtml
@@ -13,6 +13,6 @@
 
 <br>
 <?= $this->icon('comment', $this->translate('Comment')); ?> <?= isset($comment->author)
-  ? '[' . $comment->author . '] '
+  ? '[' . $this->escape($comment->author) . '] '
   : '';
 ?><?= $this->escape($comment->comment); ?>