Ignore:
Timestamp:
2013/11/18 12:56:06 (10 years ago)
Author:
m_uehara
Message:

#2464 deliv_idをエスケープします。

File:
1 edited

Legend:

Unmodified
Added
Removed

  • branches/version-2_13_1/data/Smarty/templates/sphone/shopping/payment.tpl

    r23256 r23275  
    131131        <!--{assign var=key value="deliv_id"}--> 
    132132        <!--{if $is_single_deliv}--> 
    133             <input type="hidden" name="<!--{$key}-->" value="<!--{$arrForm[$key].value}-->" id="deliv_id" /> 
     133            <input type="hidden" name="<!--{$key}-->" value="<!--{$arrForm[$key].value|h}-->" id="deliv_id" /> 
    134134        <!--{else}--> 
    135135            <section class="pay_area"> 
Note: See TracChangeset for help on using the changeset viewer.