wrap pretty much all freemarker variables (i.e the data) in encodeHTML(data..). this...
[mir.git] / templates-dist / admin / fileedit.template
1 <html>
2 <head>
3         <title>${lang("edit")} ${lang("edit")}</title>
4         <link rel="stylesheet" type="text/css" href="${encodeHTML(config.docRoot)}/admin.css">
5
6 </head>
7
8 <body bgcolor="#FFFFFF">
9
10 <include "admin/head.template">
11
12 <br>
13 <b>${lang("edit")} ${lang("edit")} :</b> ${encodeHTML(data.filename)}
14
15 <br>
16
17 <form action="${encodeHTML(config.actionRoot)}" method="post">
18
19         <input type="hidden" name="module" value="FileEdit">
20         <input type="hidden" name="filename" value="${encodeHTML(data.filename)}">
21         <input type="hidden" name="do" value="update">
22
23
24          <textarea cols="66" rows="40" name="text" wrap=virtual>${encodeHTML(data.text)}</textarea>
25
26 <br>
27
28
29
30         <input type="submit" name="save" value="${lang("save")}"> &nbsp;
31         <input type="reset" value="${lang("reset")}">
32
33
34 </form>
35 <br>
36 <br>
37
38 ${lang("preview")}
39
40 <hr size="4" width="90%" noshade>
41
42 ${data.text}
43
44 <hr size="4" width="90%" noshade>
45 <br>
46
47 <include "admin/foot.template">
48
49 </body>
50 </html>
51
52