mirror of
https://git.code.sf.net/p/seeddms/code
synced 2025-03-11 16:35:38 +00:00
fix possible cross side scripting
This commit is contained in:
parent
1c4fbbed96
commit
c5dbe1995d
|
@ -60,7 +60,7 @@ class SeedDMS_View_Help extends SeedDMS_Theme_Style {
|
||||||
$this->columnEnd();
|
$this->columnEnd();
|
||||||
$this->columnStart(8);
|
$this->columnStart(8);
|
||||||
?>
|
?>
|
||||||
<legend><?php printMLText('help_'.strtolower($context), array(), $context); ?></legend>
|
<legend><?= htmlspecialchars(getMLText('help_'.strtolower($context), array(), $context)); ?></legend>
|
||||||
<?php
|
<?php
|
||||||
|
|
||||||
$helpfile = "../languages/".$this->params['session']->getLanguage()."/help/".$context.".html";
|
$helpfile = "../languages/".$this->params['session']->getLanguage()."/help/".$context.".html";
|
||||||
|
|
Loading…
Reference in New Issue
Block a user