diff options
| author | Greg Roach <fisharebest@gmail.com> | 2014-01-01 21:47:58 +0000 |
|---|---|---|
| committer | Greg Roach <fisharebest@gmail.com> | 2014-01-01 21:47:58 +0000 |
| commit | 1fa7201e9e4eada715381c6b1a6bc8ee2955f5bf (patch) | |
| tree | 6bcfd88478b8044e3881c4be099df954d3131fe6 | |
| parent | 223f0dd8f098550ddb976d01a9baa5d686d5345d (diff) | |
| download | webtrees-1fa7201e9e4eada715381c6b1a6bc8ee2955f5bf.tar.gz webtrees-1fa7201e9e4eada715381c6b1a6bc8ee2955f5bf.tar.bz2 webtrees-1fa7201e9e4eada715381c6b1a6bc8ee2955f5bf.zip | |
Unescaped name in census assistant
| -rw-r--r-- | modules_v3/GEDFact_assistant/_CENS/census_2_source_input.php | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/modules_v3/GEDFact_assistant/_CENS/census_2_source_input.php b/modules_v3/GEDFact_assistant/_CENS/census_2_source_input.php index c1c865544e..c469db32b1 100644 --- a/modules_v3/GEDFact_assistant/_CENS/census_2_source_input.php +++ b/modules_v3/GEDFact_assistant/_CENS/census_2_source_input.php @@ -562,7 +562,7 @@ if (!defined('WT_WEBTREES')) { } var cens_ctry_a = document.getElementById('censCtry'); var cens_ctry = cens_ctry_a.value; - document.getElementById('Titl').value = '<?php echo WT_I18N::translate('Census transcript'),' - ',$wholename, ' - ', WT_I18N::translate('Household'); ?>'; + document.getElementById('Titl').value = '<?php echo WT_I18N::translate('Census transcript'),' - ', WT_Filter::escapeJs($wholename), ' - ', WT_I18N::translate('Household'); ?>'; var prev = document.getElementById('prevYear'); prev.value = cenyear; } @@ -1110,7 +1110,7 @@ if (!defined('WT_WEBTREES')) { <div class="cens_sour_1"> <div class="cens_sour_2"><?php echo WT_I18N::translate('Title'); ?></div> <script> - document.writeln('<input id="Titl" name="Titl" type="text" value="<?php echo WT_I18N::translate('Census transcript'),' - ',$wholename, ' - ', WT_I18N::translate('Household'); ?>">'); + document.writeln('<input id="Titl" name="Titl" type="text" value="<?php echo WT_I18N::translate('Census transcript'),' - ', WT_Filter::escapeJs($wholename), ' - ', WT_I18N::translate('Household'); ?>">'); </script> </div> <div class="cens_sour_1"> |