Changeset 20747 for branches/version-2_5-dev/data/Smarty/templates/admin/total/index.tpl

Timestamp:

2011/03/21 09:22:39 (13 years ago)

Author:

kotani

Message:

#862 (テンプレート上のエスケープを簡単に)実装漏れ箇所

File:

• branches/version-2_5-dev/data/Smarty/templates/admin/total/index.tpl (modified) (2 diffs)

branches/version-2_5-dev/data/Smarty/templates/admin/total/index.tpl

@@ -32 +32 @@
                     <input type="hidden" name="mode" value="search" />
                     <input type="hidden" name="form" value="1" />
-                    <input type="hidden" name="page" value="<!--{$arrForm.page.value}-->" />
-                    <input type="hidden" name="type" value="<!--{$smarty.post.type}-->" />
+                    <input type="hidden" name="page" value="<!--{$arrForm.page.value|h}-->" />
+                    <input type="hidden" name="type" value="<!--{$smarty.post.type|h}-->" />
                     <!--{if $arrErr.search_startyear_m || $arrErr.search_endyear_m}-->
                         <span class="attention"><!--{$arrErr.search_startyear_m}--></span>
@@ -98 +98 @@
         <input type="hidden" name="<!--{$smarty.const.TRANSACTION_ID_NAME}-->" value="<!--{$transactionid}-->" />
         <input type="hidden" name="mode" value="search" />
-        <input type="hidden" name="type" value="<!--{$arrForm.type.value}-->" />
-        <input type="hidden" name="page" value="<!--{$arrForm.page.value}-->" />
+        <input type="hidden" name="type" value="<!--{$arrForm.type.value|h}-->" />
+        <input type="hidden" name="page" value="<!--{$arrForm.page.value|h}-->" />
         <!--{foreach key=key item=item from=$arrHidden}-->
             <input type="hidden" name="<!--{$key}-->" value="<!--{$item|h}-->" />