projects / mir.git / blobdiff
? search:
summary | shortlog | log | commit | commitdiff | tree
raw | inline | side by side
wrap pretty much all freemarker variables (i.e the data) in encodeHTML(data..). this...
[mir.git] / templates-dist / admin / start_admin.template
diff --git a/templates-dist/admin/start_admin.template b/templates-dist/admin/start_admin.template
index 6f50bdf..5a12037 100755 (executable)
--- a/templates-dist/admin/start_admin.template
+++ b/templates-dist/admin/start_admin.template
@@ -15,23 +15,23 @@
                <b>${lang("start.openpostings.title")}</b></font>
 
         <p>
-               <a href="${config.actionRoot}?module=Content&do=listop&order=webdb_create+desc">
-               <img src="${config.docRoot}/img/pointgris.gif" border=0>${lang("edit")}</a>
+               <a href="${encodeHTML(config.actionRoot)}?module=Content&do=listop&order=webdb_create+desc">
+               <img src="${encodeHTML(config.docRoot)}/img/pointgris.gif" border=0>${lang("edit")}</a>
 
                <p>
                        <font face="Verdana, Arial, Helvetica, sans-serif" size="2" color="#663399">
                        <b>${lang("start.comments.title")}</b></font>
                <p>
-                       <a href="${config.actionRoot}?module=Comment&do=list">
-                       <img src="${config.docRoot}/img/pointgris.gif" border=0>${lang("edit")}</a>
+                       <a href="${encodeHTML(config.actionRoot)}?module=Comment&do=list">
+                       <img src="${encodeHTML(config.docRoot)}/img/pointgris.gif" border=0>${lang("edit")}</a>
            <p>
                        <font face="Verdana, Arial, Helvetica, sans-serif" size="2" color="#663399">
                        <b>${lang("start.breaking.title")}</b></font>
                <p>
-                       <img src="${config.docRoot}/img/pointgris.gif" border=0>
-                       <a href="${config.actionRoot}?module=Breaking&do=list">${lang("edit")}</a>
-               <img src="${config.docRoot}/img/pointgris.gif" border=0>
-                       <a href="${config.actionRoot}?module=Breaking&do=add">${lang("start.breaking.new")}</a>
+                       <img src="${encodeHTML(config.docRoot)}/img/pointgris.gif" border=0>
+                       <a href="${encodeHTML(config.actionRoot)}?module=Breaking&do=list">${lang("edit")}</a>
+               <img src="${encodeHTML(config.docRoot)}/img/pointgris.gif" border=0>
+                       <a href="${encodeHTML(config.actionRoot)}?module=Breaking&do=add">${lang("start.breaking.new")}</a>
 
                        <table width="100%" border="0">
                <tr><td bgcolor="white">&nbsp;</td></tr>
@@ -41,42 +41,42 @@
                        <b>${lang("start.content.title")}</b></font>
 
                <p>
-                       <img src="${config.docRoot}/img/pointgris.gif" border=0>
-                       <a href="${config.actionRoot}?module=Content&do=add&where=aktuell">${lang("start.content.new")}</a>
+                       <img src="${encodeHTML(config.docRoot)}/img/pointgris.gif" border=0>
+                       <a href="${encodeHTML(config.actionRoot)}?module=Content&do=add&where=aktuell">${lang("start.content.new")}</a>
            <p>
                        <b>${lang("start.show")}:</b><br>
-                       <img src="${config.docRoot}/img/pointgris.gif" border=0>
-                       <a href="${config.actionRoot}?module=Content&do=list&where=newswire">${lang("start.content.newswire")}</a><br>
-                       <img src="${config.docRoot}/img/pointgris.gif" border=0>
-                       <a href="${config.actionRoot}?module=Content&do=list&where=feature">${lang("start.content.feature")}</a><br>
-                       <img src="${config.docRoot}/img/pointgris.gif" border=0>
-                       <a href="${config.actionRoot}?module=Content&do=list&where=themenspecial">${lang("start.content.topicspecial")}</a><br>
-                       <img src="${config.docRoot}/img/pointgris.gif" border=0>
-                       <a href="${config.actionRoot}?module=Content&do=list&where=special">${lang("start.content.startspecial")}</a><br>
+                       <img src="${encodeHTML(config.docRoot)}/img/pointgris.gif" border=0>
+                       <a href="${encodeHTML(config.actionRoot)}?module=Content&do=list&where=newswire">${lang("start.content.newswire")}</a><br>
+                       <img src="${encodeHTML(config.docRoot)}/img/pointgris.gif" border=0>
+                       <a href="${encodeHTML(config.actionRoot)}?module=Content&do=list&where=feature">${lang("start.content.feature")}</a><br>
+                       <img src="${encodeHTML(config.docRoot)}/img/pointgris.gif" border=0>
+                       <a href="${encodeHTML(config.actionRoot)}?module=Content&do=list&where=themenspecial">${lang("start.content.topicspecial")}</a><br>
+                       <img src="${encodeHTML(config.docRoot)}/img/pointgris.gif" border=0>
+                       <a href="${encodeHTML(config.actionRoot)}?module=Content&do=list&where=special">${lang("start.content.startspecial")}</a><br>
                        <br>
-               <img src="${config.docRoot}/img/pointgris.gif" border=0>
-                       <a href="${config.actionRoot}?module=Content&do=list&where=nfrei" >${lang("start.content.not_published")}</a><br>
-                       <img src="${config.docRoot}/img/pointgris.gif" border=0>
-                       <a href="${config.actionRoot}?module=Content&do=list&where=media">${lang("start.content.with_media")}</a><br>
-                       <img src="${config.docRoot}/img/pointgris.gif" border=0>
-                       <a href="${config.actionRoot}?module=Content&do=list&where=lastchange">${lang("start.content.last_changes")}</a><br>
-                       <img src="${config.docRoot}/img/pointgris.gif" border=0>
-                       <a href="${config.actionRoot}?module=Content&do=list&where=comments">${lang("start.content.with_comments")}</a><br>
+               <img src="${encodeHTML(config.docRoot)}/img/pointgris.gif" border=0>
+                       <a href="${encodeHTML(config.actionRoot)}?module=Content&do=list&where=nfrei" >${lang("start.content.not_published")}</a><br>
+                       <img src="${encodeHTML(config.docRoot)}/img/pointgris.gif" border=0>
+                       <a href="${encodeHTML(config.actionRoot)}?module=Content&do=list&where=media">${lang("start.content.with_media")}</a><br>
+                       <img src="${encodeHTML(config.docRoot)}/img/pointgris.gif" border=0>
+                       <a href="${encodeHTML(config.actionRoot)}?module=Content&do=list&where=lastchange">${lang("start.content.last_changes")}</a><br>
+                       <img src="${encodeHTML(config.docRoot)}/img/pointgris.gif" border=0>
+                       <a href="${encodeHTML(config.actionRoot)}?module=Content&do=list&where=comments">${lang("start.content.with_comments")}</a><br>
                         <br>
-                        <img src="${config.docRoot}/img/pointgris.gif" border=0>
-                        <a href="${config.actionRoot}?module=Hidden&do=list">${lang("start.content.hidden")}</a>
+                        <img src="${encodeHTML(config.docRoot)}/img/pointgris.gif" border=0>
+                        <a href="${encodeHTML(config.actionRoot)}?module=Hidden&do=list">${lang("start.content.hidden")}</a>
 
 <br><br>
                         <b>here to edit all the include files:</b>
                         <br>
-                        <img src="${config.docRoot}/img/pointgris.gif" border=0>&nbsp;
-                        <a href="${config.actionRoot}?module=FileEdit&do=list">${lang("edit")}
+                        <img src="${encodeHTML(config.docRoot)}/img/pointgris.gif" border=0>&nbsp;
+                        <a href="${encodeHTML(config.actionRoot)}?module=FileEdit&do=list">${lang("edit")}
 ${lang("file")}</a>
 
                         <br><br>
 
 
-     <form action="${config.actionRoot}" method="post">
+     <form action="${encodeHTML(config.actionRoot)}" method="post">
             <input type="hidden" name="module" value="Content">
        <input type="hidden" name="do" value="search">
        <input type="hidden" name="order" value="date desc">
@@ -104,64 +104,64 @@ ${lang("file")}</a>
                                <br>
                                ${lang("start.generate.all.title")}:
                                <br>
-                               <img src="${config.docRoot}/img/pointgris.gif" border=0>
-                               <a href="${config.actionRoot}?module=Producer&task=All">${lang("start.generate.all.new")}</a> &nbsp;|&nbsp;
+                               <img src="${encodeHTML(config.docRoot)}/img/pointgris.gif" border=0>
+                               <a href="${encodeHTML(config.actionRoot)}?module=Producer&task=All">${lang("start.generate.all.new")}</a> &nbsp;|&nbsp;
         <!--
        <br>
-        <a href="${config.actionRoot}?module=Producer&task=All&forced=1">alles (!)(forced, update auf www > 5min.)</a>
+        <a href="${encodeHTML(config.actionRoot)}?module=Producer&task=All&forced=1">alles (!)(forced, update auf www > 5min.)</a>
         &nbsp;|&nbsp;
         <br>
-        <a href="${config.actionRoot}?module=Producer&task=All&forced=1&sync=1">alles (!)(www sofort, nur im Notfall)</a>
+        <a href="${encodeHTML(config.actionRoot)}?module=Producer&task=All&forced=1&sync=1">alles (!)(www sofort, nur im Notfall)</a>
         &nbsp;|&nbsp;
         <br>
        -->
                                <br>${lang("start.generate.parts.title")}:
                                <br>
-                       <img src="${config.docRoot}/img/pointgris.gif" border=0>
-                               <a href="${config.actionRoot}?module=Producer&task=StartPage">${lang("start.generate.startpages.new")}</a>
+                       <img src="${encodeHTML(config.docRoot)}/img/pointgris.gif" border=0>
+                               <a href="${encodeHTML(config.actionRoot)}?module=Producer&task=StartPage">${lang("start.generate.startpages.new")}</a>
                                &nbsp;|&nbsp;
-                               <a href="${config.actionRoot}?module=Producer&task=StartPage&forced=1">${lang("start.generate.all_forced")}</a>
+                               <a href="${encodeHTML(config.actionRoot)}?module=Producer&task=StartPage&forced=1">${lang("start.generate.all_forced")}</a>
                                &nbsp;|&nbsp;
-                               <a href="${config.actionRoot}?module=Producer&task=StartPage&forced=1&sync=1">${lang("start.generate.all_sync")}</a>
+                               <a href="${encodeHTML(config.actionRoot)}?module=Producer&task=StartPage&forced=1&sync=1">${lang("start.generate.all_sync")}</a>
                                <br>
-                               <img src="${config.docRoot}/img/pointgris.gif" border=0>
-                       <a href="${config.actionRoot}?module=Producer&task=Content">${lang("start.generate.content.new")}</a>
+                               <img src="${encodeHTML(config.docRoot)}/img/pointgris.gif" border=0>
+                       <a href="${encodeHTML(config.actionRoot)}?module=Producer&task=Content">${lang("start.generate.content.new")}</a>
                                &nbsp;|&nbsp;
-                               <a href="${config.actionRoot}?module=Producer&task=Content&forced=1">${lang("start.generate.all_forced")}</a>
+                               <a href="${encodeHTML(config.actionRoot)}?module=Producer&task=Content&forced=1">${lang("start.generate.all_forced")}</a>
                                <br>
-                       <img src="${config.docRoot}/img/pointgris.gif" border=0>
-                               <a href="${config.actionRoot}?module=Producer&task=Topics">${lang("start.generate.topics.new")}</a>
+                       <img src="${encodeHTML(config.docRoot)}/img/pointgris.gif" border=0>
+                               <a href="${encodeHTML(config.actionRoot)}?module=Producer&task=Topics">${lang("start.generate.topics.new")}</a>
                                &nbsp;|&nbsp;
-                               <a href="${config.actionRoot}?module=Producer&task=Topics&forced=1">${lang("start.generate.all_forced")}</a>
+                               <a href="${encodeHTML(config.actionRoot)}?module=Producer&task=Topics&forced=1">${lang("start.generate.all_forced")}</a>
                                <br>
-                               <a href="${config.actionRoot}?module=Producer&task=OpenPosting">
-                       <img src="${config.docRoot}/img/pointgris.gif" border=0>${lang("start.generate.postings.new")}</a>
+                               <a href="${encodeHTML(config.actionRoot)}?module=Producer&task=OpenPosting">
+                       <img src="${encodeHTML(config.docRoot)}/img/pointgris.gif" border=0>${lang("start.generate.postings.new")}</a>
                                &nbsp;|&nbsp;
-                               <a href="${config.actionRoot}?module=Producer&task=OpenPosting&forced=1">${lang("start.generate.all_forced")}</a>
+                               <a href="${encodeHTML(config.actionRoot)}?module=Producer&task=OpenPosting&forced=1">${lang("start.generate.all_forced")}</a>
                                <br>
-                               <a href="${config.actionRoot}?module=Producer&task=Images">
-                       <img src="${config.docRoot}/img/pointgris.gif" border=0>${lang("start.generate.images.new")}</a>
+                               <a href="${encodeHTML(config.actionRoot)}?module=Producer&task=Images">
+                       <img src="${encodeHTML(config.docRoot)}/img/pointgris.gif" border=0>${lang("start.generate.images.new")}</a>
                                &nbsp;|&nbsp;
-                               <a href="${config.actionRoot}?module=Producer&task=Images&forced=1">${lang("start.generate.all_forced")}</a>
+                               <a href="${encodeHTML(config.actionRoot)}?module=Producer&task=Images&forced=1">${lang("start.generate.all_forced")}</a>
                 <br>
-                               <a href="${config.actionRoot}?module=Producer&task=Audio">
-                       <img src="${config.docRoot}/img/pointgris.gif" border=0>${lang("start.generate.audio.new")}</a>
+                               <a href="${encodeHTML(config.actionRoot)}?module=Producer&task=Audio">
+                       <img src="${encodeHTML(config.docRoot)}/img/pointgris.gif" border=0>${lang("start.generate.audio.new")}</a>
                                &nbsp;|&nbsp;
-                               <a href="${config.actionRoot}?module=Producer&task=Audio&forced=1">${lang("start.generate.all_forced")}</a>
+                               <a href="${encodeHTML(config.actionRoot)}?module=Producer&task=Audio&forced=1">${lang("start.generate.all_forced")}</a>
 <br>
-                               <a href="${config.actionRoot}?module=Producer&task=Video">
-                       <img src="${config.docRoot}/img/pointgris.gif" border=0>${lang("start.generate.video.new")}</a>
+                               <a href="${encodeHTML(config.actionRoot)}?module=Producer&task=Video">
+                       <img src="${encodeHTML(config.docRoot)}/img/pointgris.gif" border=0>${lang("start.generate.video.new")}</a>
                                &nbsp;|&nbsp;
-                               <a href="${config.actionRoot}?module=Producer&task=Video&forced=1">${lang("start.generate.all_forced")}</a>
+                               <a href="${encodeHTML(config.actionRoot)}?module=Producer&task=Video&forced=1">${lang("start.generate.all_forced")}</a>
 <br>
-                               <a href="${config.actionRoot}?module=Producer&task=Other">
-                       <img src="${config.docRoot}/img/pointgris.gif" border=0>${lang("start.generate.other.new")}</a>
+                               <a href="${encodeHTML(config.actionRoot)}?module=Producer&task=Other">
+                       <img src="${encodeHTML(config.docRoot)}/img/pointgris.gif" border=0>${lang("start.generate.other.new")}</a>
                                &nbsp;|&nbsp;
-                               <a href="${config.actionRoot}?module=Producer&task=Other&forced=1">${lang("start.generate.all_forced")}</a>
+                               <a href="${encodeHTML(config.actionRoot)}?module=Producer&task=Other&forced=1">${lang("start.generate.all_forced")}</a>
 
                                <br>
-        <a href="${config.actionRoot}?module=Producer&task=Navigation">
-                       <img src="${config.docRoot}/img/pointgris.gif" border=0>${lang("start.generate.navigation")}</a>
+        <a href="${encodeHTML(config.actionRoot)}?module=Producer&task=Navigation">
+                       <img src="${encodeHTML(config.docRoot)}/img/pointgris.gif" border=0>${lang("start.generate.navigation")}</a>
                                <br>
 
 
@@ -177,30 +177,30 @@ ${lang("file")}</a>
                <b>${lang("start.coverage.title")}</b></font>
 
                <P>
-                       <a href="${config.actionRoot}?module=Schwerpunkt&do=list" >
-      <img src="${config.docRoot}/img/pointgris.gif" border=0> ${lang("edit")}</a><br>
-      <a href="${config.actionRoot}?module=Schwerpunkt&do=add" >
-                 <img src="${config.docRoot}/img/pointgris.gif" border=0> ${lang("add")}</a>
+                       <a href="${encodeHTML(config.actionRoot)}?module=Schwerpunkt&do=list" >
+      <img src="${encodeHTML(config.docRoot)}/img/pointgris.gif" border=0> ${lang("edit")}</a><br>
+      <a href="${encodeHTML(config.actionRoot)}?module=Schwerpunkt&do=add" >
+                 <img src="${encodeHTML(config.docRoot)}/img/pointgris.gif" border=0> ${lang("add")}</a>
     <p>
 -->
                        <font face="Verdana, Arial, Helvetica, sans-serif" size="2" color="#663399">
                        <b>${lang("start.topics.title")}</b></font>
 
                <p>
-                       <a href="${config.actionRoot}?module=Topics&do=list">
-      <img src="${config.docRoot}/img/pointgris.gif" border=0> ${lang("edit")}</a><br>
-      <a href="${config.actionRoot}?module=Topics&do=add" >
-                       <img src="${config.docRoot}/img/pointgris.gif" border=0> ${lang("add")}</a>
+                       <a href="${encodeHTML(config.actionRoot)}?module=Topics&do=list">
+      <img src="${encodeHTML(config.docRoot)}/img/pointgris.gif" border=0> ${lang("edit")}</a><br>
+      <a href="${encodeHTML(config.actionRoot)}?module=Topics&do=add" >
+                       <img src="${encodeHTML(config.docRoot)}/img/pointgris.gif" border=0> ${lang("add")}</a>
 
                <p>
                        <font face="Verdana, Arial, Helvetica, sans-serif" size="2" color="#663399">
                  <b>${lang("start.images.title")}</b></font>
 
     <p>
-                       <a href="${config.actionRoot}?module=Images&do=list">
-      <img src="${config.docRoot}/img/pointgris.gif" border=0> ${lang("edit")}</a><br>
-      <a href="${config.actionRoot}?module=Images&do=add" >
-                       <img src="${config.docRoot}/img/pointgris.gif" border=0> ${lang("add")}</a>
+                       <a href="${encodeHTML(config.actionRoot)}?module=Images&do=list">
+      <img src="${encodeHTML(config.docRoot)}/img/pointgris.gif" border=0> ${lang("edit")}</a><br>
+      <a href="${encodeHTML(config.actionRoot)}?module=Images&do=add" >
+                       <img src="${encodeHTML(config.docRoot)}/img/pointgris.gif" border=0> ${lang("add")}</a>
 
                <p>
 
@@ -208,10 +208,10 @@ ${lang("file")}</a>
                  <b>${lang("start.audio.title")}</b></font>
 
     <p>
-                       <a href="${config.actionRoot}?module=Audio&do=list">
-      <img src="${config.docRoot}/img/pointgris.gif" border=0> ${lang("edit")}</a><br>
-      <a href="${config.actionRoot}?module=Audio&do=add" >
-                       <img src="${config.docRoot}/img/pointgris.gif" border=0> ${lang("add")}</a>
+                       <a href="${encodeHTML(config.actionRoot)}?module=Audio&do=list">
+      <img src="${encodeHTML(config.docRoot)}/img/pointgris.gif" border=0> ${lang("edit")}</a><br>
+      <a href="${encodeHTML(config.actionRoot)}?module=Audio&do=add" >
+                       <img src="${encodeHTML(config.docRoot)}/img/pointgris.gif" border=0> ${lang("add")}</a>
 
                <p>
 
@@ -219,10 +219,10 @@ ${lang("file")}</a>
                  <b>${lang("start.video.title")}</b></font>
 
     <p>
-                       <a href="${config.actionRoot}?module=Video&do=list">
-      <img src="${config.docRoot}/img/pointgris.gif" border=0> ${lang("edit")}</a><br>
-      <a href="${config.actionRoot}?module=Video&do=add" >
-                       <img src="${config.docRoot}/img/pointgris.gif" border=0> ${lang("add")}</a>
+                       <a href="${encodeHTML(config.actionRoot)}?module=Video&do=list">
+      <img src="${encodeHTML(config.docRoot)}/img/pointgris.gif" border=0> ${lang("edit")}</a><br>
+      <a href="${encodeHTML(config.actionRoot)}?module=Video&do=add" >
+                       <img src="${encodeHTML(config.docRoot)}/img/pointgris.gif" border=0> ${lang("add")}</a>
 
                <p>
 
@@ -230,10 +230,10 @@ ${lang("file")}</a>
                  <b>${lang("start.other_media.title")}</b></font>
 
     <p>
-                       <a href="${config.actionRoot}?module=OtherMedia&do=list">
-      <img src="${config.docRoot}/img/pointgris.gif" border=0> ${lang("edit")}</a><br>
-      <a href="${config.actionRoot}?module=OtherMedia&do=add" >
-                       <img src="${config.docRoot}/img/pointgris.gif" border=0> ${lang("add")}</a>
+                       <a href="${encodeHTML(config.actionRoot)}?module=OtherMedia&do=list">
+      <img src="${encodeHTML(config.docRoot)}/img/pointgris.gif" border=0> ${lang("edit")}</a><br>
+      <a href="${encodeHTML(config.actionRoot)}?module=OtherMedia&do=add" >
+                       <img src="${encodeHTML(config.docRoot)}/img/pointgris.gif" border=0> ${lang("add")}</a>
 
                <p>
 
@@ -241,10 +241,10 @@ ${lang("file")}</a>
                  <b>${lang("start.mediafolder.title")}</b></font>
 
                <p>
-                       <a href="${config.actionRoot}?module=Mediafolder&do=list">
-      <img src="${config.docRoot}/img/pointgris.gif" border=0> ${lang("edit")}</a><br>
-      <a href="${config.actionRoot}?module=Mediafolder&do=add" >
-                       <img src="${config.docRoot}/img/pointgris.gif" border=0> ${lang("add")}</a>
+                       <a href="${encodeHTML(config.actionRoot)}?module=Mediafolder&do=list">
+      <img src="${encodeHTML(config.docRoot)}/img/pointgris.gif" border=0> ${lang("edit")}</a><br>
+      <a href="${encodeHTML(config.actionRoot)}?module=Mediafolder&do=add" >
+                       <img src="${encodeHTML(config.docRoot)}/img/pointgris.gif" border=0> ${lang("add")}</a>
 
     <p>
 <!--
@@ -252,10 +252,10 @@ ${lang("file")}</a>
                  <b>${lang("start.languages.title")}</b></font>
 
                <p>
-                       <a href="${config.actionRoot}?module=Language&do=list">
-      <img src="${config.docRoot}/img/pointgris.gif" border=0> ${lang("edit")}</a><br>
-      <a href="${config.actionRoot}?module=Language&do=add" >
-                       <img src="${config.docRoot}/img/pointgris.gif" border=0> ${lang("add")}</a>
+                       <a href="${encodeHTML(config.actionRoot)}?module=Language&do=list">
+      <img src="${encodeHTML(config.docRoot)}/img/pointgris.gif" border=0> ${lang("edit")}</a><br>
+      <a href="${encodeHTML(config.actionRoot)}?module=Language&do=add" >
+                       <img src="${encodeHTML(config.docRoot)}/img/pointgris.gif" border=0> ${lang("add")}</a>
 
                <p>
 -->
@@ -263,10 +263,10 @@ ${lang("file")}</a>
                  <b>${lang("start.imcs.title")}</b></font>
 
                <p>
-                       <a href="${config.actionRoot}?module=LinksImcs&do=list">
-      <img src="${config.docRoot}/img/pointgris.gif" border=0> ${lang("edit")}</a><br>
-      <a href="${config.actionRoot}?module=LinksImcs&do=add" >
-                       <img src="${config.docRoot}/img/pointgris.gif" border=0> ${lang("add")}</a>
+                       <a href="${encodeHTML(config.actionRoot)}?module=LinksImcs&do=list">
+      <img src="${encodeHTML(config.docRoot)}/img/pointgris.gif" border=0> ${lang("edit")}</a><br>
+      <a href="${encodeHTML(config.actionRoot)}?module=LinksImcs&do=add" >
+                       <img src="${encodeHTML(config.docRoot)}/img/pointgris.gif" border=0> ${lang("add")}</a>
                        </td>
 
 
@@ -278,14 +278,14 @@ ${lang("file")}</a>
 
                <font  face="Verdana, Arial, Helvetica, sans-serif" size="2" color="#663399">
                <b>${lang("start.messageboard.title")}</b>
-               <font size="-1"><br><a href="${config.actionRoot}?module=Message&do=add">${lang("add")}</a></font>
+               <font size="-1"><br><a href="${encodeHTML(config.actionRoot)}?module=Message&do=add">${lang("add")}</a></font>
                <if data.messages>
                        <list data.messages as m>
                                <p>
-                               <if m.title><b>${m.title}</b><br></if>
-                               ${m.description}<br>
+                               <if m.title><b>${encodeHTML(m.title)}</b><br></if>
+                               ${encodeHTML(m.description)}<br>
                                <font size="-2">
-                               <if m.creator><i>von: ${m.creator}</i> / </if>${m.webdb_create}<br>
+                               <if m.creator><i>von: ${encodeHTML(m.creator)}</i> / </if>${encodeHTML(m.webdb_create)}<br>
                                </font>
                        </list>
                <else>
The Mir CMS