mirror of
https://git.code.sf.net/p/seeddms/code
synced 2025-03-12 08:55:54 +00:00
escape html code before output
This commit is contained in:
parent
52a2106155
commit
b0d8b42011
|
@ -132,7 +132,7 @@ if(in_array($type, array('docspermonth'))) {
|
|||
var data = [
|
||||
<?php
|
||||
foreach($data as $rec) {
|
||||
echo '['.$rec['key'].','.$rec['total'].'],'."\n";
|
||||
echo '['.htmlspecialchars($rec['key']).','.$rec['total'].'],'."\n";
|
||||
}
|
||||
?>
|
||||
];
|
||||
|
@ -169,7 +169,7 @@ if(in_array($type, array('docspermonth'))) {
|
|||
var data = [
|
||||
<?php
|
||||
foreach($data as $rec) {
|
||||
echo '{ label: "'.$rec['key'].'", data: [[1,'.$rec['total'].']]},'."\n";
|
||||
echo '{ label: "'.htmlspecialchars($rec['key']).'", data: [[1,'.$rec['total'].']]},'."\n";
|
||||
}
|
||||
?>
|
||||
];
|
||||
|
|
Loading…
Reference in New Issue
Block a user