diff options
| author | Christian Fowler <spider@viovio.com> | 2006-03-11 06:42:03 +0000 |
|---|---|---|
| committer | Christian Fowler <spider@viovio.com> | 2006-03-11 06:42:03 +0000 |
| commit | 814d70e1ceca1b0a8546d46d70a4f25253f5af47 (patch) | |
| tree | 7918a0d3f557ad00ed4a76e893b59b7c79821661 /templates | |
| parent | 89cbc2c9d2d74722df8540815ff58e5568ee2d36 (diff) | |
| download | liberty-814d70e1ceca1b0a8546d46d70a4f25253f5af47.tar.gz liberty-814d70e1ceca1b0a8546d46d70a4f25253f5af47.tar.bz2 liberty-814d70e1ceca1b0a8546d46d70a4f25253f5af47.zip | |
escape comment title
Diffstat (limited to 'templates')
| -rw-r--r-- | templates/comments.tpl | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/templates/comments.tpl b/templates/comments.tpl index c991e29..ec53650 100644 --- a/templates/comments.tpl +++ b/templates/comments.tpl @@ -31,7 +31,7 @@ <div class="row"> {formlabel label="Title" for="comments-title"} {forminput} - <input type="text" size="50" name="comment_title" id="comments-title" value="{$postComment.title}" /> + <input type="text" size="50" name="comment_title" id="comments-title" value="{$postComment.title|escape:html}" /> {formhelp note=""} {/forminput} </div> @@ -97,7 +97,7 @@ <select name="comments_sort_mode" id="comments-sort"> <option value="commentDate_desc" {if $comments_sort_mode eq "commentDate_desc"}selected="selected"{/if}>Newest first</option> <option value="commentDate_asc" {if $comments_sort_mode eq "commentDate_asc"}selected="selected"{/if}>Oldest first</option> - </select> + </select> </td> <td style="text-align:right"><input type="submit" name="comments_setOptions" value="set" /></td> </tr> |