FSN#37533 BLOCK_START titel altijd HTML-safe maken

svn path=/Website/trunk/; revision=34786
This commit is contained in:
Jos Groot Lipman
2017-08-01 11:19:43 +00:00
parent e725e5244c
commit c6f1db6cc1
5 changed files with 6 additions and 6 deletions

View File

@@ -412,7 +412,7 @@ function parentButton()
%></div><% // div.leftcontainer, de rest staat rechts
BLOCK_START("mldInfo", L("lcl_complain") + " "+ (mld_melding.prefix != null? mld_melding.prefix : "") + mld_key + (mld_melding.mld_onderwerp ? ": <span class='mldsubject'>" + safe.html(mld_melding.mld_onderwerp) + "</span>" : ""), { safe: false });
BLOCK_START("mldInfo", L("lcl_complain") + " "+ (mld_melding.prefix != null? mld_melding.prefix : "") + mld_key + (mld_melding.mld_onderwerp ? ": <span class='mldsubject'>" + safe.html(mld_melding.mld_onderwerp) + "</span>" : ""), { ishtmlsafe: true });
if (mld_melding.behandel_key) {
FCLTpersoonselector("sBehandel",
"sgBehandelaar",

View File

@@ -78,7 +78,7 @@ FCLTHeader.Requires({plugins:["jQuery", "kenmerk"],
<div id="search">
<form method="get" action="prs_phonebook_list.asp" target=workFrame name="u2" onsubmit='startSearch(1);return false'>
<input type="hidden" name="user_key" value="<%=user_key%>">
<% BLOCK_START("searchtable", L("lcl_pb_filterblok") + " <span id='phonebookteaser'>" + S("prs_phonebook_info") + "</span>", { safe: false });%>
<% BLOCK_START("searchtable", L("lcl_pb_filterblok") + " <span id='phonebookteaser'>" + S("prs_phonebook_info") + "</span>", { ishtmlsafe: true });%>
<tr>
<td class="searchkolom1">
<table><!-- x rijen, 2 kolommen: label + veld -->

View File

@@ -276,7 +276,7 @@ var new_item_key = 0; // Globaal
{
if (first)
{
BLOCK_START("resObj",L("lcl_res_objects") + " <a href='javascript:openLegenda()'><span class='fa fa-list-ul details' title='"+L("lcl_res_legenda")+"'></span></a>", { safe: false });
BLOCK_START("resObj",L("lcl_res_objects") + " <a href='javascript:openLegenda()'><span class='fa fa-list-ul details' title='"+L("lcl_res_legenda")+"'></span></a>", { ishtmlsafe: true });
%>
<tr>
<td>

View File

@@ -279,9 +279,9 @@ function scaffolding_search(model, scf_params)
if ("estimated_rows" in model)
est_title = " <em style='font-size:10px'>estimated {0} rows as of {1}</em>".format(model.estimated_rows, toDateTimeString(model.last_analyzed));
else
est_title = " " + model.records_title;
est_title = " " + safe.html(model.records_title);
BLOCK_START("searchtable", L("lcl_filterblok") + est_title);
BLOCK_START("searchtable", L("lcl_filterblok") + est_title, { ishtmlsafe: true });
if (scf_params.search.labels)
{

View File

@@ -120,7 +120,7 @@ function BLOCK_START(id, title, params) {
if (__blockactive__) ERROR_NESTED_BLOCK_START_DETECTED;
__blockactive__ = true;
if (params.safe !== false && title && title != "&nbsp;") var safe_title = safe.html(title);
if (!params.ishtmlsafe && title && title != "&nbsp;") var safe_title = safe.html(title);
%><!-- BLOCK_START <%=id%> -->
<div id="<%=id%>" class="fcltblock" <%=params.hidden? ' style="display:none"' : ''%>>
<div class="fcltblockhead"><%=(safe_title || title)%>