diff options
author | Andy Staudacher <andy.st@gmail.com> | 2009-08-29 10:45:47 -0700 |
---|---|---|
committer | Andy Staudacher <andy.st@gmail.com> | 2009-08-29 10:45:47 -0700 |
commit | 020281d932c566476222e6c825ada3affff239a6 (patch) | |
tree | 80d8e2a60fcbaeabcc1939b06531f563c3014948 /modules/user | |
parent | a2e2a2178b1b84a9895fdddd020c5ec8dddf89c5 (diff) |
Adding SafeString which is going to replace p::clean() and p::purify().
Refactoring of Xss_Security_Test.
t() and t2() return a SafeString instance.
TODO:
- Update all code to use SafeString where appropriate.
- Update golden fole of Xss_Security_Test
- Stop reporting CLEAN vars in Xss_Security_Test
Diffstat (limited to 'modules/user')
-rw-r--r-- | modules/user/views/login.html.php | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/modules/user/views/login.html.php b/modules/user/views/login.html.php index 10ed31b2..97341762 100644 --- a/modules/user/views/login.html.php +++ b/modules/user/views/login.html.php @@ -8,11 +8,11 @@ </li> <? else: ?> <li class="first"> - <?= t('Logged in as %name', array('name' => - '<a href="' . url::site("form/edit/users/{$user->id}") . + <?= t('Logged in as %name', array('name' => SafeString::of( + '<a href="' . url::site("form/edit/users/{$user->id}") . '" title="' . t("Edit Your Profile") . '" id="gUserProfileLink" class="gDialogLink">' . - p::clean($user->display_name()) . '</a>')) ?> + p::clean($user->display_name()) . '</a>')->mark_html_safe())) ?> </li> <li> <a href="<?= url::site("logout?csrf=$csrf&continue=" . urlencode(url::current(true))) ?>" |