Ignore:
Timestamp:
2014/10/28 16:33:54 (6 years ago)
Author:
shinichi_takahashi
Message:

#2448 エスケープ漏れ対応

File:
1 edited

Legend:

Unmodified
Added
Removed
  • branches/version-2_13_3/data/Smarty/templates/admin/order/status.tpl

    r23546 r23668  
    2626    <input type="hidden" name="<!--{$smarty.const.TRANSACTION_ID_NAME}-->" value="<!--{$transactionid}-->" /> 
    2727    <input type="hidden" name="mode" value="" /> 
    28     <input type="hidden" name="status" value="<!--{if $arrForm.status == ""}-->1<!--{else}--><!--{$arrForm.status}--><!--{/if}-->" /> 
    29     <input type="hidden" name="search_pageno" value="<!--{$tpl_pageno}-->" /> 
     28    <input type="hidden" name="status" value="<!--{if $arrForm.status == ""}-->1<!--{else}--><!--{$arrForm.status|h}--><!--{/if}-->" /> 
     29    <input type="hidden" name="search_pageno" value="<!--{$tpl_pageno|h}-->" /> 
    3030    <input type="hidden" name="order_id" value="" /> 
    3131    <div id="order" class="contents-main"> 
Note: See TracChangeset for help on using the changeset viewer.