Changeset 22461 for branches/version-2_12-multilang/data/Smarty/templates/admin/order/edit.tpl

Timestamp:

2013/01/29 14:41:44 (10 years ago)

Author:

m_uehara

Message:

#2072 クロスサイトスクリプティング対策

File:

• branches/version-2_12-multilang/data/Smarty/templates/admin/order/edit.tpl (modified) (1 diff)

branches/version-2_12-multilang/data/Smarty/templates/admin/order/edit.tpl

@@ -647 +647 @@
                    type="text"
                    value="" <!--{if $arrErr[$key1][$shipping_index] != ""}--><!--{sfSetErrorStyle}--><!--{/if}--> />
-            <input type="hidden" name="<!--{$key1}-->[<!--{$shipping_index}-->]" value="<!--{$arrShipping[$key1]|default:""}-->" />
-            <input type="hidden" name="<!--{$key2}-->[<!--{$shipping_index}-->]" value="<!--{$arrShipping[$key2]|default:""}-->" />
-            <input type="hidden" name="<!--{$key3}-->[<!--{$shipping_index}-->]" value="<!--{$arrShipping[$key3]|default:""}-->" />
+            <input type="hidden" name="<!--{$key1}-->[<!--{$shipping_index}-->]" value="<!--{$arrShipping[$key1]|default:""|h}-->" />
+            <input type="hidden" name="<!--{$key2}-->[<!--{$shipping_index}-->]" value="<!--{$arrShipping[$key2]|default:""|h}-->" />
+            <input type="hidden" name="<!--{$key3}-->[<!--{$shipping_index}-->]" value="<!--{$arrShipping[$key3]|default:""|h}-->" />
                 </td>
             </tr>