fix #1330 管理機能の一部にエスケープを追加 (#1332)

baserproject · Jan 29, 2020 · edd7e13 · edd7e13
1 parent 8c14a2a
commit edd7e13
Show file tree

Hide file tree

Showing 3 changed files with 3 additions and 3 deletions.
diff --git a/app/webroot/theme/admin-third/Elements/admin/feed_configs/index_row.php b/app/webroot/theme/admin-third/Elements/admin/feed_configs/index_row.php
@@ -23,7 +23,7 @@
 		<?php endif ?>
 	</td>
 	<td class="bca-table-listup__tbody-td"><?php echo $data['FeedConfig']['id']; ?></td>
-	<td class="bca-table-listup__tbody-td"><?php $this->BcBaser->link($data['FeedConfig']['name'], ['action' => 'edit', $data['FeedConfig']['id']]) ?></td>
+	<td class="bca-table-listup__tbody-td"><?php $this->BcBaser->link($data['FeedConfig']['name'], ['action' => 'edit', $data['FeedConfig']['id']], ['escape' => true]) ?></td>
 	<td class="bca-table-listup__tbody-td"><?php echo $data['FeedConfig']['display_number'] ?></td>
 	<?php echo $this->BcListTable->dispatchShowRow($data) ?>
 	<td class="bca-table-listup__tbody-td"><?php echo $this->BcTime->format('Y-m-d', $data['FeedConfig']['created']); ?><br />

diff --git a/lib/Baser/Plugin/Feed/View/Elements/admin/feed_configs/index_row.php b/lib/Baser/Plugin/Feed/View/Elements/admin/feed_configs/index_row.php
@@ -27,7 +27,7 @@
 		<?php $this->BcBaser->link($this->BcBaser->getImg('admin/icn_tool_delete.png', ['alt' => __d('baser', '削除'), 'class' => 'btn']), ['action' => 'ajax_delete', $data['FeedConfig']['id']], ['title' => __d('baser', '削除'), 'class' => 'btn-delete']) ?>
 	</td>
 	<td><?php echo $data['FeedConfig']['id']; ?></td>
-	<td><?php $this->BcBaser->link($data['FeedConfig']['name'], ['action' => 'edit', $data['FeedConfig']['id']]) ?></td>
+	<td><?php $this->BcBaser->link($data['FeedConfig']['name'], ['action' => 'edit', $data['FeedConfig']['id']], ['escape' => true]) ?></td>
 	<td><?php echo $data['FeedConfig']['display_number'] ?></td>
 	<?php echo $this->BcListTable->dispatchShowRow($data) ?>
 	<td><?php echo $this->BcTime->format('Y-m-d', $data['FeedConfig']['created']); ?><br />

diff --git a/lib/Baser/View/Elements/admin/editor_templates/index_row.php b/lib/Baser/View/Elements/admin/editor_templates/index_row.php
@@ -26,7 +26,7 @@
 		<?php if ($data['EditorTemplate']['image']): ?>
 			<?php $this->BcBaser->img('/files/editor/' . $data['EditorTemplate']['image'], ['url' => ['action' => 'edit', $data['EditorTemplate']['id']], 'alt' => $data['EditorTemplate']['name'], 'title' => $data['EditorTemplate']['name'], 'style' => 'float:left;margin-right:10px;height:36px']) ?>
 		<?php endif ?>
-		<?php $this->BcBaser->link($data['EditorTemplate']['name'], ['action' => 'edit', $data['EditorTemplate']['id']]) ?>
+		<?php $this->BcBaser->link($data['EditorTemplate']['name'], ['action' => 'edit', $data['EditorTemplate']['id']], ['escape' => true]) ?>
 	</td>
 	<td><?php echo $data['EditorTemplate']['description']; ?></td>
 	<?php echo $this->BcListTable->dispatchShowRow($data) ?>