Changeset 20753


Ignore:
Timestamp:
2011/03/21 18:00:43 (10 years ago)
Author:
kotani
Message:

#862 (テンプレート上のエスケープを簡単に)実装漏れ箇所

Location:
branches/version-2_5-dev/data/Smarty/templates/admin
Files:
4 edited

Legend:

Unmodified
Added
Removed
  • branches/version-2_5-dev/data/Smarty/templates/admin/order/edit.tpl

    r20608 r20753  
    145145            <td> 
    146146                <!--{if $arrForm.customer_id.value > 0}--> 
    147                     <!--{$arrForm.customer_id.value}--> 
     147                    <!--{$arrForm.customer_id.value|h}--> 
    148148                    <input type="hidden" name="customer_id" value="<!--{$arrForm.customer_id.value|h}-->" /> 
    149149                <!--{else}--> 
  • branches/version-2_5-dev/data/Smarty/templates/admin/order/pdf_input.tpl

    r20741 r20753  
    4141<input type="hidden" name="mode" value="confirm" /> 
    4242<!--{foreach from=$arrForm.order_id item=order_id}--> 
    43     <input type="hidden" name="order_id[]" value="<!--{$order_id}-->"> 
     43    <input type="hidden" name="order_id[]" value="<!--{$order_id|h}-->"> 
    4444<!--{/foreach}--> 
    4545 
  • branches/version-2_5-dev/data/Smarty/templates/admin/products/category.tpl

    r20689 r20753  
    3434<input type="hidden" name="<!--{$smarty.const.TRANSACTION_ID_NAME}-->" value="<!--{$transactionid}-->" /> 
    3535<input type="hidden" name="mode" value="edit" /> 
    36 <input type="hidden" name="parent_category_id" value="<!--{$arrForm.parent_category_id}-->"> 
    37 <input type="hidden" name="category_id" value="<!--{$arrForm.category_id}-->"> 
     36<input type="hidden" name="parent_category_id" value="<!--{$arrForm.parent_category_id|h}-->"> 
     37<input type="hidden" name="category_id" value="<!--{$arrForm.category_id|h}-->"> 
    3838<input type="hidden" name="keySet" value=""> 
    3939<div id="products" class="contents-main"> 
  • branches/version-2_5-dev/data/Smarty/templates/admin/products/product_select.tpl

    r20741 r20753  
    3232    fm.recommend_id<!--{$smarty.get.no|h}-->.value = id; 
    3333    fm.mode.value = 'recommend_select'; 
    34     fm.anchor_key.value = 'recommend_no<!--{$smarty.get.no}-->'; 
     34    fm.anchor_key.value = 'recommend_no<!--{$smarty.get.no|h}-->'; 
    3535    fm.submit(); 
    3636    window.close(); 
     
    5858    <tr> 
    5959        <th>商品名</th> 
    60         <td><input type="text" name="search_name" value="<!--{$arrForm.search_name}-->" size="35" class="box35" /></td> 
     60        <td><input type="text" name="search_name" value="<!--{$arrForm.search_name|h}-->" size="35" class="box35" /></td> 
    6161    </tr> 
    6262</table> 
     
    8989                <td><!--{$arrProducts[cnt].product_code|default:"-"|h}--></td> 
    9090                <td><!--{$arrProducts[cnt].name|h}--></td> 
    91                 <td align="center"><a href="#" onclick="return func_submit(<!--{$arrProducts[cnt].product_id}-->)">決定</a></td> 
     91                <td align="center"><a href="#" onclick="return func_submit(<!--{$arrProducts[cnt].product_id|h}-->)">決定</a></td> 
    9292            </tr> 
    9393            <!--▲商品<!--{$smarty.section.cnt.iteration}-->--> 
Note: See TracChangeset for help on using the changeset viewer.