Skip to content
This repository was archived by the owner on Sep 10, 2021. It is now read-only.

Commit 001c487

Browse files
author
Jamie Snape
committed
Escape variables in communityagreement module
1 parent 9b7ca65 commit 001c487

File tree

2 files changed

+6
-28
lines changed

2 files changed

+6
-28
lines changed

modules/communityagreement/views/community/agreementdialog.phtml

Lines changed: 6 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -31,15 +31,14 @@ echo '<script type="text/javascript" src="'.$this->moduleWebroot.'/public/js/com
3131
</div>
3232

3333
<div class="licenseDisplay">
34-
<?php echo $this->t(nl2br($this->agreementDao->getAgreement())); ?>
34+
<?php echo $this->t(nl2br($this->escape($this->agreementDao->getAgreement()))); ?>
3535
</div>
3636

37-
<input type="checkbox" id="agreementAccepted">I have read and agree to the above terms</input>
37+
<input type="checkbox" id="agreementAccepted" /> <label for="agreementAccepted">I have read and agree to the above terms</label>
3838
<div class="agreementButtons">
3939
<form class="genericForm">
40-
<input type="button" id="confirmAgreement" value="Accept" disabled="disabled"/>
41-
<input type="button" id="declineAgreement" style="margin-left: 10px;" value="Cancel"/>
40+
<input type="button" id="confirmAgreement" value="Accept" disabled="disabled" />
41+
<input type="button" id="declineAgreement" style="margin-left: 10px;" value="Cancel" />
4242
</form>
43-
<div>
44-
45-
</div>
43+
</div>
44+
</div>

modules/communityagreement/views/index/index.phtml

Lines changed: 0 additions & 21 deletions
This file was deleted.

0 commit comments

Comments
 (0)