Skip to content

Commit 098c2bc

Browse files
committed
KISS and form_value() doesn't use escaping
1 parent 2ef3029 commit 098c2bc

File tree

1 file changed

+4
-4
lines changed

1 file changed

+4
-4
lines changed

Diff for: components/account/update.htm

+4-4
Original file line numberDiff line numberDiff line change
@@ -1,13 +1,13 @@
1-
{{ form_ajax('onUpdate', { model: user }) }}
1+
{{ form_ajax('onUpdate') }}
22

33
<div class="form-group">
44
<label for="accountName">Full Name</label>
5-
<input name="name" type="text" class="form-control" id="accountName" value="{{ form_value('name') }}">
5+
<input name="name" type="text" class="form-control" id="accountName" value="{{ user.name }}">
66
</div>
77

88
<div class="form-group">
99
<label for="accountEmail">Email</label>
10-
<input name="email" type="email" class="form-control" id="accountEmail" value="{{ form_value('email') }}">
10+
<input name="email" type="email" class="form-control" id="accountEmail" value="{{ user.email }}">
1111
</div>
1212

1313
<div class="form-group">
@@ -22,4 +22,4 @@
2222

2323
<button type="submit" class="btn btn-default">Save</button>
2424

25-
{{ form_close() }}
25+
{{ form_close() }}

0 commit comments

Comments
 (0)