diff options
author | Andy Staudacher <andy.st@gmail.com> | 2009-08-31 21:51:57 -0700 |
---|---|---|
committer | Andy Staudacher <andy.st@gmail.com> | 2009-08-31 21:51:57 -0700 |
commit | 2bc73e2e36fefc3c1ee1b8e97e686c6729e58dcb (patch) | |
tree | c511db2684ea957572a1d27caf49a08963ef8484 /modules/exif/views | |
parent | 8c3a2db3803ccaa3572f0bf061ca7faf62f13fca (diff) |
Fix XSS vectors in HTML attributes (mostly t() calls)
Diffstat (limited to 'modules/exif/views')
-rw-r--r-- | modules/exif/views/exif_sidebar.html.php | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/modules/exif/views/exif_sidebar.html.php b/modules/exif/views/exif_sidebar.html.php index ee528613..60c0e1d4 100644 --- a/modules/exif/views/exif_sidebar.html.php +++ b/modules/exif/views/exif_sidebar.html.php @@ -1,5 +1,5 @@ <?php defined("SYSPATH") or die("No direct script access.") ?> -<a id="gExifDataLink" href="<?= url::site("exif/show/{$item->id}") ?>" title="<?= t("Photo Details") ?>" +<a id="gExifDataLink" href="<?= url::site("exif/show/{$item->id}") ?>" title="<?= t("Photo Details")->for_html_attr() ?>" class="gDialogLink gButtonLink ui-icon-left ui-state-default ui-corner-all"> <span class="ui-icon ui-icon-info"></span> <?= t("View more information") ?> |