Skip to content
This repository was archived by the owner on Sep 10, 2021. It is now read-only.

Commit df91359

Browse files
author
Jamie Snape
committed
Escape variables in validation module
1 parent b3d8f0a commit df91359

File tree

1 file changed

+4
-4
lines changed

1 file changed

+4
-4
lines changed

modules/validation/views/index/index.phtml

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -36,10 +36,10 @@ $this->headScript()->appendFile($this->moduleWebroot.'/public/js/index/index.ind
3636
} ?>"/>
3737
<span class="dashIcon"><img
3838
src="<?php echo $this->coreWebroot.'/public/images/icons/ok.png'; ?>"/></span><span
39-
class="dashTitle"><?php echo $dashboard->getName(); ?></span>
39+
class="dashTitle"><?php echo $this->escape($dashboard->getName()); ?></span>
4040
<span class="dashDeleteIcon"><img
4141
src="<?php echo $this->coreWebroot.'/public/images/icons/nok.png'; ?>"/></span>
42-
<span class="dashDescription"><?php echo $dashboard->getDescription(); ?></span>
42+
<span class="dashDescription"><?php echo $this->escape($dashboard->getDescription()); ?></span>
4343
</div>
4444
<?php
4545
}
@@ -64,8 +64,8 @@ $this->headScript()->appendFile($this->moduleWebroot.'/public/js/index/index.ind
6464
<h1>Stats</h1>
6565
<?php
6666
echo "<ul>";
67-
echo " <li>{$this->nDashboards} {$this->t('dashboard')}".(($this->nDashboards > 1) ? 's' : '')."</li>";
68-
echo " <li>{$this->nSubmissions} {$this->t('submissions')}".(($this->nSubmissions > 1) ? 's' : '')."</li>";
67+
echo " <li>{$this->escape($this->nDashboards)} {$this->t('dashboard')}".(($this->nDashboards > 1) ? 's' : '')."</li>";
68+
echo " <li>{$this->escape($this->nSubmissions)} {$this->t('submissions')}".(($this->nSubmissions > 1) ? 's' : '')."</li>";
6969
echo "</ul>";
7070
?>
7171
</div>

0 commit comments

Comments
 (0)