Changeset 21276


Ignore:
Timestamp:
2011/10/11 20:36:53 (9 years ago)
Author:
kotani
Message:

refs #862 エスケープ漏れ

Location:
branches/version-2_11-dev/data/Smarty/templates
Files:
3 edited

Legend:

Unmodified
Added
Removed
  • branches/version-2_11-dev/data/Smarty/templates/default/mypage/delivery_addr.tpl

    r20764 r21276  
    3232        <input type="hidden" name="<!--{$smarty.const.TRANSACTION_ID_NAME}-->" value="<!--{$transactionid}-->" /> 
    3333        <input type="hidden" name="mode" value="edit" /> 
    34         <input type="hidden" name="other_deliv_id" value="<!--{$smarty.session.other_deliv_id}-->" /> 
     34        <input type="hidden" name="other_deliv_id" value="<!--{$smarty.session.other_deliv_id|h}-->" /> 
    3535        <input type="hidden" name="ParentPage" value="<!--{$ParentPage}-->" /> 
    3636 
  • branches/version-2_11-dev/data/Smarty/templates/mobile/mypage/delivery_addr.tpl

    r21009 r21276  
    2525  <input type="hidden" name="<!--{$smarty.const.TRANSACTION_ID_NAME}-->" value="<!--{$transactionid}-->" /> 
    2626    <input type="hidden" name="mode" value="edit"> 
    27     <input type="hidden" name="other_deliv_id" value="<!--{$smarty.session.other_deliv_id}-->" /> 
     27    <input type="hidden" name="other_deliv_id" value="<!--{$smarty.session.other_deliv_id|h}-->" /> 
    2828    <input type="hidden" name="ParentPage" value="<!--{$ParentPage}-->"> 
    2929 
  • branches/version-2_11-dev/data/Smarty/templates/sphone/mypage/delivery_addr.tpl

    r21234 r21276  
    3636           <input type="hidden" name="<!--{$smarty.const.TRANSACTION_ID_NAME}-->" value="<!--{$transactionid}-->" /> 
    3737           <input type="hidden" name="mode" value="edit" /> 
    38            <input type="hidden" name="other_deliv_id" value="<!--{$smarty.session.other_deliv_id}-->" /> 
     38           <input type="hidden" name="other_deliv_id" value="<!--{$smarty.session.other_deliv_id|h}-->" /> 
    3939           <input type="hidden" name="ParentPage" value="<!--{$ParentPage}-->" /> 
    4040 
Note: See TracChangeset for help on using the changeset viewer.