sbrl-github/Pepperminty-Wiki
sbrl-github
/
Pepperminty-Wiki
mirror of https://github.com/sbrl/Pepperminty-Wiki.git
1
0
Fork 0
Code

Bugfix: Properly escape page names in the datalist

This commit is contained in:
Starbeamrainbowlabs 2016-09-27 20:08:16 +01:00
parent cbde150075
commit fe165bec3e
2 changed files with 4 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
build/index.php
View File

@ -1311,7 +1311,8 @@ class page_renderer
$result = "<datalist id='allpages'>\n";
foreach($arrayPageIndex as $pagename => $pagedetails)
{
$result .= "\t\t\t<option value='$pagename' />\n";
$escapedPageName = str_replace('"', '&quot;', $pagename);
$result .= "\t\t\t<option value=\"$escapedPageName\" />\n";
}
$result .= "\t\t</datalist>";

3
core.php
View File

@ -1004,7 +1004,8 @@ class page_renderer
$result = "<datalist id='allpages'>\n";
foreach($arrayPageIndex as $pagename => $pagedetails)
{
$result .= "\t\t\t<option value='$pagename' />\n";
$escapedPageName = str_replace('"', '&quot;', $pagename);
$result .= "\t\t\t<option value=\"$escapedPageName\" />\n";
}
$result .= "\t\t</datalist>";