Changeset 23275


Ignore:
Timestamp:
2013/11/18 12:56:06 (6 years ago)
Author:
m_uehara
Message:

#2464 deliv_idをエスケープします。

Location:
branches/version-2_13_1/data/Smarty/templates
Files:
3 edited

Legend:

Unmodified
Added
Removed

  • branches/version-2_13_1/data/Smarty/templates/default/shopping/payment.tpl

    r23256 r23275  
    132132            <!--{assign var=key value="deliv_id"}--> 
    133133            <!--{if $is_single_deliv}--> 
    134                 <input type="hidden" name="<!--{$key}-->" value="<!--{$arrForm[$key].value}-->" id="deliv_id" /> 
     134                <input type="hidden" name="<!--{$key}-->" value="<!--{$arrForm[$key].value|h}-->" id="deliv_id" /> 
    135135            <!--{else}--> 
    136136            <div class="pay_area"> 

  • branches/version-2_13_1/data/Smarty/templates/mobile/shopping/payment.tpl

    r23236 r23275  
    2929        <input type="hidden" name="uniqid" value="<!--{$tpl_uniqid}-->"> 
    3030        <!--{assign var=key value="deliv_id"}--> 
    31         <input type="hidden" name="<!--{$key}-->" value="<!--{$arrForm[$key].value}-->"> 
     31        <input type="hidden" name="<!--{$key}-->" value="<!--{$arrForm[$key].value|h}-->"> 
    3232        ■お支払方法 <font color="#FF0000">*</font><br> 
    3333        <!--{assign var=key value="payment_id"}--> 

  • branches/version-2_13_1/data/Smarty/templates/sphone/shopping/payment.tpl

    r23256 r23275  
    131131        <!--{assign var=key value="deliv_id"}--> 
    132132        <!--{if $is_single_deliv}--> 
    133             <input type="hidden" name="<!--{$key}-->" value="<!--{$arrForm[$key].value}-->" id="deliv_id" /> 
     133            <input type="hidden" name="<!--{$key}-->" value="<!--{$arrForm[$key].value|h}-->" id="deliv_id" /> 
    134134        <!--{else}--> 
    135135            <section class="pay_area"> 
Note: See TracChangeset for help on using the changeset viewer.