Changeset 21276 for branches/version-2_11-dev/data/Smarty/templates/default/mypage/delivery_addr.tpl

Timestamp:

2011/10/11 20:36:53 (13 years ago)

Author:

kotani

Message:

refs #862 エスケープ漏れ

File:

• branches/version-2_11-dev/data/Smarty/templates/default/mypage/delivery_addr.tpl (modified) (1 diff)

branches/version-2_11-dev/data/Smarty/templates/default/mypage/delivery_addr.tpl

@@ -32 +32 @@
         <input type="hidden" name="<!--{$smarty.const.TRANSACTION_ID_NAME}-->" value="<!--{$transactionid}-->" />
         <input type="hidden" name="mode" value="edit" />
-        <input type="hidden" name="other_deliv_id" value="<!--{$smarty.session.other_deliv_id}-->" />
+        <input type="hidden" name="other_deliv_id" value="<!--{$smarty.session.other_deliv_id|h}-->" />
         <input type="hidden" name="ParentPage" value="<!--{$ParentPage}-->" />