Changeset 21276 for branches/version-2_11-dev/data/Smarty/templates/mobile/mypage/delivery_addr.tpl

Timestamp:

2011/10/11 20:36:53 (13 years ago)

Author:

kotani

Message:

refs #862 エスケープ漏れ

File:

• branches/version-2_11-dev/data/Smarty/templates/mobile/mypage/delivery_addr.tpl (modified) (1 diff)

branches/version-2_11-dev/data/Smarty/templates/mobile/mypage/delivery_addr.tpl

@@ -25 +25 @@
   <input type="hidden" name="<!--{$smarty.const.TRANSACTION_ID_NAME}-->" value="<!--{$transactionid}-->" />
     <input type="hidden" name="mode" value="edit">
-    <input type="hidden" name="other_deliv_id" value="<!--{$smarty.session.other_deliv_id}-->" />
+    <input type="hidden" name="other_deliv_id" value="<!--{$smarty.session.other_deliv_id|h}-->" />
     <input type="hidden" name="ParentPage" value="<!--{$ParentPage}-->">