Changeset 20749 for branches/version-2_5-dev/data/Smarty/templates/admin/products/product_rank.tpl

Timestamp:

2011/03/21 11:34:00 (13 years ago)

Author:

kotani

Message:

#862 (テンプレート上のエスケープを簡単に)実装漏れ箇所

File:

• branches/version-2_5-dev/data/Smarty/templates/admin/products/product_rank.tpl (modified) (1 diff)

branches/version-2_5-dev/data/Smarty/templates/admin/products/product_rank.tpl

@@ -35 +35 @@
 <input type="hidden" name="<!--{$smarty.const.TRANSACTION_ID_NAME}-->" value="<!--{$transactionid}-->" />
 <input type="hidden" name="mode" value="edit" />
-<input type="hidden" name="parent_category_id" value="<!--{$arrForm.parent_category_id}-->" />
-<input type="hidden" name="category_id" value="<!--{$arrForm.category_id}-->" />
+<input type="hidden" name="parent_category_id" value="<!--{$arrForm.parent_category_id|h}-->" />
+<input type="hidden" name="category_id" value="<!--{$arrForm.category_id|h}-->" />
 <input type="hidden" name="product_id" value="" />
-<input type="hidden" name="pageno" value="<!--{$tpl_pageno}-->" />
+<input type="hidden" name="pageno" value="<!--{$tpl_pageno|h}-->" />
 <div id="products" class="contents-main">