From 9369ccab7fb3413d63e218cec81b4cf43442fd98 Mon Sep 17 00:00:00 2001 From: Bharat Mediratta Date: Sun, 31 May 2009 01:02:51 -0700 Subject: Run all variables that come from user-entered data through p::clean() --- modules/notification/views/item_deleted.html.php | 12 ++++++++---- modules/notification/views/item_updated.html.php | 12 ++++++------ 2 files changed, 14 insertions(+), 10 deletions(-) (limited to 'modules/notification') diff --git a/modules/notification/views/item_deleted.html.php b/modules/notification/views/item_deleted.html.php index ac9ab594..2d6d5738 100644 --- a/modules/notification/views/item_deleted.html.php +++ b/modules/notification/views/item_deleted.html.php @@ -1,20 +1,24 @@ - <?= $subject ?> + <?= p::clean($subject) ?> -

+

- +
$item->parent()->title)) ?> + array("title" => p::clean($item->parent()->title))) ?>
parent()->url(array(), true) ?> + + parent()->url(array(), true) ?> + +
diff --git a/modules/notification/views/item_updated.html.php b/modules/notification/views/item_updated.html.php index cba522e8..0620c50c 100644 --- a/modules/notification/views/item_updated.html.php +++ b/modules/notification/views/item_updated.html.php @@ -1,18 +1,18 @@ - <?= $subject ?> + <?= p::clean($subject) ?> -

+

title != $new->title): ?> - + - + @@ -22,12 +22,12 @@ description != $new->description): ?> - + description)): ?> - +
title ?>title) ?> title ?>title) ?>
description ?>description) ?>
description ?>description) ?>
-- cgit v1.2.3