[fix] Missing addslashes in batch alert message

joomla · Dec 25, 2014 · de6b74a · de6b74a
1 parent 0cc7016
commit de6b74a
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/layouts/joomla/toolbar/batch.php b/layouts/joomla/toolbar/batch.php
@@ -13,6 +13,7 @@
 
 $title = $displayData['title'];
 $message = JText::_('JLIB_HTML_PLEASE_MAKE_A_SELECTION_FROM_THE_LIST');
+$message = addslashes($message);
 ?>
 <button data-toggle="modal" onclick="if (document.adminForm.boxchecked.value==0){alert('<?php echo $message; ?>');  }else{jQuery( '#collapseModal' ).modal('show'); return true;}" class="btn btn-small">
 	<i class="icon-checkbox-partial" title="<?php echo $title; ?>"></i>