Changeset 22890

Timestamp:

2013/06/25 08:58:43 (13 years ago)

Author:

undertree

Message:

#2127 の修正、再コミット

Location:

branches/version-2_13-dev/data/Smarty/templates

Files:

• admin/products/category.tpl (modified) (2 diffs)
• admin/products/category_tree_fork.tpl (modified) (1 diff)
• admin/products/confirm.tpl (modified) (1 diff)
• admin/products/index.tpl (modified) (2 diffs)
• default/products/detail.tpl (modified) (1 diff)

branches/version-2_13-dev/data/Smarty/templates/admin/products/category.tpl

@@ -62 +62 @@
                 <span class="attention"><!--{$arrErr.category_name}--></span>
                 <!--{/if}-->
-                <input type="text" name="category_name" value="<!--{$arrForm.category_name|h|escape}-->" size="30" class="box30" maxlength="<!--{$smarty.const.STEXT_LEN}-->" />
+                <input type="text" name="category_name" value="<!--{$arrForm.category_name|h}-->" size="30" class="box30" maxlength="<!--{$smarty.const.STEXT_LEN}-->" />
                 <a class="btn-normal" href="javascript:;" onclick="fnModeSubmit('edit','',''); return false;"><span class="btn-next">登録</span></a><span class="attention">&nbsp;（上限<!--{$smarty.const.STEXT_LEN}-->文字）</span>
         </div>
@@ -88 +88 @@
                 <td>
                 <!--{if $arrList[cnt].level != $smarty.const.LEVEL_MAX}-->
-                    <a href="?" onclick="fnModeSubmit('tree', 'parent_category_id', <!--{$arrList[cnt].category_id}-->); return false"><!--{$arrList[cnt].category_name|h|escape}--></a>
+                    <a href="?" onclick="fnModeSubmit('tree', 'parent_category_id', <!--{$arrList[cnt].category_id}-->); return false"><!--{$arrList[cnt].category_name|h}--></a>
                 <!--{else}-->
-                    <!--{$arrList[cnt].category_name|h|escape}-->
+                    <!--{$arrList[cnt].category_name|h}-->
                 <!--{/if}-->
                 </td>

branches/version-2_13-dev/data/Smarty/templates/admin/products/category_tree_fork.tpl

@@ -33 +33 @@
                 <img src="<!--{$TPL_URLPATH}-->img/contents/folder_close.gif" alt="フォルダ" />
             <!--{/if}-->
-            <!--{$disp_name|sfCutString:10:false|h|escape}--></a>
+            <!--{$disp_name|sfCutString:10:false|h}--></a>
         <!--{else}-->
             <img src="<!--{$TPL_URLPATH}-->img/contents/folder_close.gif" alt="フォルダ" />
-            <!--{$disp_name|sfCutString:10:false|h|escape}-->
+            <!--{$disp_name|sfCutString:10:false|h}-->
         <!--{/if}-->
         <!--{if in_array($child.category_id, $arrParentID)}-->

branches/version-2_13-dev/data/Smarty/templates/admin/products/confirm.tpl

@@ -62 +62 @@
                 <!--{section name=cnt loop=$arrForm.arrCategoryId}-->
                     <!--{assign var=key value=$arrForm.arrCategoryId[cnt]}-->
-                    <!--{$arrCatList[$key]|sfTrim}--><br />
+                    <!--{$arrCatList[$key]|sfTrim|h}--><br />
                 <!--{/section}-->
             </td>

branches/version-2_13-dev/data/Smarty/templates/admin/products/index.tpl

@@ -58 +58 @@
 
 <div id="products" class="contents-main">
-<form name="search_form" id="search_form" method="post" action="?">
+<form ]="search_form" id="search_form" method="post" action="?">
     <input type="hidden" name="<!--{$smarty.const.TRANSACTION_ID_NAME}-->" value="<!--{$transactionid}-->" />
     <input type="hidden" name="mode" value="search" />
@@ -280 +280 @@
                         <div id="disp_cat<!--{$smarty.section.cnt.iteration}-->" style="display:<!--{$cat_flg}-->">
                             <!--{foreach from=$arrProducts[cnt].categories item=category_id name=categories}-->
-                                <!--{$arrCatList[$category_id]|sfTrim}-->
+                                <!--{$arrCatList[$category_id]|sfTrim|h}-->
                                 <!--{if !$smarty.foreach.categories.last}--><br /><!--{/if}-->
                             <!--{/foreach}-->

branches/version-2_13-dev/data/Smarty/templates/default/products/detail.tpl

@@ -179 +179 @@
                     <dd>
                         <!--{section name=s loop=$arrRelativeCat[r]}-->
-                            <a href="<!--{$smarty.const.ROOT_URLPATH}-->products/list.php?category_id=<!--{$arrRelativeCat[r][s].category_id}-->"><!--{$arrRelativeCat[r][s].category_name}--></a>
+                            <a href="<!--{$smarty.const.ROOT_URLPATH}-->products/list.php?category_id=<!--{$arrRelativeCat[r][s].category_id}-->"><!--{$arrRelativeCat[r][s].category_name|h}--></a>
                             <!--{if !$smarty.section.s.last}--><!--{$smarty.const.SEPA_CATNAVI}--><!--{/if}-->
                         <!--{/section}-->