summaryrefslogtreecommitdiff
path: root/modules/gallery
diff options
context:
space:
mode:
Diffstat (limited to 'modules/gallery')
-rw-r--r--modules/gallery/views/admin_languages.html.php4
-rw-r--r--modules/gallery/views/simple_uploader.html.php8
2 files changed, 6 insertions, 6 deletions
diff --git a/modules/gallery/views/admin_languages.html.php b/modules/gallery/views/admin_languages.html.php
index 052d749b..ae2b3383 100644
--- a/modules/gallery/views/admin_languages.html.php
+++ b/modules/gallery/views/admin_languages.html.php
@@ -40,7 +40,7 @@
</form>
<script type="text/javascript">
- var old_default_locale = "<?= html::escape_for_js($default_locale) ?>";
+ var old_default_locale = "<?= html::clean_js($default_locale) ?>";
$("input[name='installed_locales[]']").change(function (event) {
if (this.checked) {
@@ -57,7 +57,7 @@
dataType: "json",
success: function(data) {
if (data.result == "success") {
- el = $('<a href="<?= html::escape_for_js(url::site("admin/maintenance/start/gallery_task::update_l10n?csrf=$csrf")) ?>"></a>'); // this is a little hack to trigger the update_l10n task in a dialog
+ el = $('<a href="<?= html::clean_js(url::site("admin/maintenance/start/gallery_task::update_l10n?csrf=$csrf")) ?>"></a>'); // this is a little hack to trigger the update_l10n task in a dialog
el.gallery_dialog();
el.trigger('click');
}
diff --git a/modules/gallery/views/simple_uploader.html.php b/modules/gallery/views/simple_uploader.html.php
index b136972a..b2d01ea7 100644
--- a/modules/gallery/views/simple_uploader.html.php
+++ b/modules/gallery/views/simple_uploader.html.php
@@ -82,13 +82,13 @@
<script type="text/javascript">
var swfu = new SWFUpload({
- flash_url: "<?= html::escape_for_js(url::file("lib/swfupload/swfupload.swf")) ?>",
- upload_url: "<?= html::escape_for_js(url::site("simple_uploader/add_photo/$item->id")) ?>",
+ flash_url: "<?= html::clean_js(url::file("lib/swfupload/swfupload.swf")) ?>",
+ upload_url: "<?= html::clean_js(url::site("simple_uploader/add_photo/$item->id")) ?>",
post_params: <?= json_encode(array(
"g3sid" => Session::instance()->id(),
"user_agent" => Input::instance()->server("HTTP_USER_AGENT"),
"csrf" => $csrf)) ?>,
- file_size_limit: "<?= html::escape_for_js(ini_get("upload_max_filesize") ? num::convert_to_bytes(ini_get("upload_max_filesize"))."B" : "100MB")) ?>",
+ file_size_limit: "<?= html::clean_js(ini_get("upload_max_filesize") ? num::convert_to_bytes(ini_get("upload_max_filesize"))."B" : "100MB")) ?>",
file_types: "*.gif;*.jpg;*.jpeg;*.png;*.flv;*.mp4;*.GIF;*.JPG;*.JPEG;*.PNG;*.FLV;*.MP4",
file_types_description: "<?= t("Photos and Movies")->for_js() ?>",
file_upload_limit: 1000,
@@ -97,7 +97,7 @@
debug: false,
// Button settings
- button_image_url: "<?= html::escape_for_js(url::file("themes/default/images/select-photos-backg.png")) ?>",
+ button_image_url: "<?= html::clean_js(url::file("themes/default/images/select-photos-backg.png")) ?>",
button_width: "202",
button_height: "45",
button_placeholder_id: "gChooseFilesButtonPlaceholder",