Changeset 22916 for branches/version-2_13-dev/data/Smarty

Timestamp:

2013/06/28 15:28:20 (13 years ago)

Author:

shutta

Message:

#2264 (おすすめ商品検索画面にエスケープ漏れの項目がある)
r22861(脆弱性対応)を2_13-devにもコミット。

File:

• branches/version-2_13-dev/data/Smarty/templates/admin/contents/recommend_search.tpl (modified) (1 diff)

branches/version-2_13-dev/data/Smarty/templates/admin/contents/recommend_search.tpl

@@ -30 +30 @@
 
 function func_submit( id ){
-    var fm = window.opener.document.form<!--{$smarty.get.rank}-->;
+    var fm = window.opener.document.form<!--{$rank|h}-->;
     fm.product_id.value = id;
     fm.mode.value = 'set_item';
-    fm.rank.value = '<!--{$smarty.get.rank}-->';
+    fm.rank.value = '<!--{$rank|h}-->';
     fm.submit();
     window.close();