diff options
| author | Max Kremmel <xing@synapse.plus.com> | 2007-01-05 08:31:22 +0000 |
|---|---|---|
| committer | Max Kremmel <xing@synapse.plus.com> | 2007-01-05 08:31:22 +0000 |
| commit | 881be9228acb5f20dff31f7f1566f1c053ba9945 (patch) | |
| tree | 27bce84d4e0a9200b4295e8c50591f0092300385 | |
| parent | f4f3ac14c535a8af279afa3c142f6e30f19aebab (diff) | |
| download | nexus-881be9228acb5f20dff31f7f1566f1c053ba9945.tar.gz nexus-881be9228acb5f20dff31f7f1566f1c053ba9945.tar.bz2 nexus-881be9228acb5f20dff31f7f1566f1c053ba9945.zip | |
searched for .title} .description} and .data} and added |escape where appropriate (i hope). might have misinterpreted a situation or two, so please keep a lookout...
| -rw-r--r-- | templates/menus.tpl | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/templates/menus.tpl b/templates/menus.tpl index ce2e416..22d05b0 100644 --- a/templates/menus.tpl +++ b/templates/menus.tpl @@ -28,7 +28,7 @@ <div class="row"> {formlabel label="Description" for="description"} {forminput} - <textarea name="description" id="description" cols="50" rows="3">{$editMenu.description}</textarea> + <textarea name="description" id="description" cols="50" rows="3">{$editMenu.description|escape}</textarea> {formhelp note="A description of this menu. This description is visible to users that can add items to this menu."} {/forminput} </div> @@ -127,7 +127,7 @@ <tr class="{cycle values="even,odd"}"> <td> <h2>{$menu.title|escape}</h2> - {$menu.description} + {$menu.description|escape} </td> <td>{$menu.plugin_guid}</td> <td> |