mirror of
https://git.code.sf.net/p/seeddms/code
synced 2024-11-26 15:32:13 +00:00
fix possible cross side scripting
This commit is contained in:
parent
1c4fbbed96
commit
c5dbe1995d
|
@ -60,7 +60,7 @@ class SeedDMS_View_Help extends SeedDMS_Theme_Style {
|
|||
$this->columnEnd();
|
||||
$this->columnStart(8);
|
||||
?>
|
||||
<legend><?php printMLText('help_'.strtolower($context), array(), $context); ?></legend>
|
||||
<legend><?= htmlspecialchars(getMLText('help_'.strtolower($context), array(), $context)); ?></legend>
|
||||
<?php
|
||||
|
||||
$helpfile = "../languages/".$this->params['session']->getLanguage()."/help/".$context.".html";
|
||||
|
|
Loading…
Reference in New Issue
Block a user