From 17436a20a18f14d0b910ee1e5ba0564cd14d18de Mon Sep 17 00:00:00 2001 From: mh Date: Tue, 10 Dec 2002 09:44:10 +0000 Subject: [PATCH] wrap pretty much all freemarker variables (i.e the data) in encodeHTML(data..). this fixes tons of bugs in the admin, like when stuff dissappeats after quotes, etc.. also add query_text, query_field, etc.. to the delete request URL so that after deleting a comment, you come back to the same place on your list.. also get rid of useless offset hidden parameter which causes a bug when searching and your offset is above 0 --- templates-dist/admin/commentlist.template | 31 +++++++++++++++---------------- 1 file changed, 15 insertions(+), 16 deletions(-) diff --git a/templates-dist/admin/commentlist.template b/templates-dist/admin/commentlist.template index 5cd065a3..be81a56d 100755 --- a/templates-dist/admin/commentlist.template +++ b/templates-dist/admin/commentlist.template @@ -1,7 +1,7 @@ ${lang("commentlist.htmltitle")} - + @@ -12,11 +12,10 @@ class="list1"class="list2"> - - - -- 2.11.0
-
+ - - +
${entry.webdb_create_short}
+ 		${encodeHTML(entry.webdb_create_short)}
V- 		- ${entry.title}
 - Von: ${entry.creator}
 - ${entry.description} -
URL: ${entry.main_url} -
${lang("edit")} + ${encodeHTML(entry.title)}
 + Von: ${encodeHTML(entry.creator)}
 + ${encodeHTML(entry.description)} +
URL: ${encodeHTML(entry.main_url)} +
${lang("edit")} 		${data.articleHash[entry.to_media]["title"]}
- + edit | - + view 		 ${lang("delete")} +  ${lang("delete")}
${data.count} ${lang("records")} + ${encodeHTML(data.count)} ${lang("records")} / ${lang("show_from_to", data.from, data.to)}  
-zurueck  +zurueck  -weiter +weiter