Mirrors/Sequenzia
2
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Fix more vulnerabilities

Browse Source
This commit is contained in:
Parziphal 2016-02-13 20:29:57 -05:00
parent 565fcf08a3
commit 531b5844d0
8 changed files with 8 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
app/views/comment/search.php
View File

@ -1,7 +1,7 @@
<div id="forum">
<div style="margin-bottom: 1em;">
<?= $this->formTag(['action' => "search"], ['method' => 'get'], function(){ ?>
<?= $this->textFieldTag("query", $this->params()->query, ['size' => 40]) ?>
<?= $this->textFieldTag("query", $this->h($this->params()->query), ['size' => 40]) ?>
<?= $this->submitTag($this->t('.submit')) ?>
<?php }) ?>
</div>

2
app/views/forum/index.php
View File

@ -1,7 +1,7 @@
<div id="forum">
<div id="search" style="margin-bottom: 1em;">
<?= $this->formTag(['action' => "search"], ['method' => 'get'], function(){ ?>
<?= $this->textFieldTag("query", $this->params()->query, ['size' => 40]) ?>
<?= $this->textFieldTag("query", $this->h($this->params()->query), ['size' => 40]) ?>
<?= $this->submitTag($this->t('.search')) ?>
<?php }) ?>
</div>

2
app/views/note/search.php
View File

@ -1,7 +1,7 @@
<h4><?= $this->t('.title') ?></h4>
<?= $this->formTag(['action' => 'search'], ['method' => 'get'], function(){ ?>
<?= $this->textFieldTag("query", $this->params()->query, ['size' => '40']) ?> <?= $this->submitTag($this->t('.search')) ?>
<?= $this->textFieldTag("query", $this->h($this->params()->query), ['size' => '40']) ?> <?= $this->submitTag($this->t('.search')) ?>
<?php }) ?>
<?php if ($this->notes) : ?>

2
app/views/pool/index.php
View File

@ -4,7 +4,7 @@
<?php if ($this->params()->order) : ?>
<?= $this->hiddenFieldTag("order", $this->params()->order) ?>
<?php endif ?>
<?= $this->textFieldTag("query", $this->params()->query, ['size' => 40]) ?>
<?= $this->textFieldTag("query", $this->h($this->params()->query), ['size' => 40]) ?>
<?= $this->submitTag($this->t('.search'), ['name' => '']) ?>
<?php }) ?>
</div>

2
app/views/post/moderate.php
View File

@ -1,5 +1,5 @@
<form method="get" action="/post/moderate">
<?= $this->textFieldTag("query", $this->params()->query, ['size' => '40']) ?>
<?= $this->textFieldTag("query", $this->h($this->params()->query), ['size' => '40']) ?>
<?= $this->submitTag($this->t('buttons.search')) ?>
</form>

2
app/views/tag_alias/index.php
View File

@ -1,6 +1,6 @@
<div style="margin-bottom: 1em;">
<?= $this->formTag([], ['method' => 'get'], function(){ ?>
<?= $this->textFieldTag("query", $this->params()->query) ?>
<?= $this->textFieldTag("query", $this->h($this->params()->query)) ?>
<?= $this->submitTag($this->t('.search')) ?>
<?= $this->submitTag($this->t('tag_implication.index.search')) ?>
<?php }) ?>

2
app/views/tag_implication/index.php
View File

@ -1,6 +1,6 @@
<div style="margin-bottom: 1em;">
<?= $this->formTag(['action' => "index"], ['method' => 'get'], function(){ ?>
<?= $this->textFieldTag("query", $this->params()->query) ?>
<?= $this->textFieldTag("query", $this->h($this->params()->query)) ?>
<?= $this->submitTag($this->t('.search')) ?>
<?= $this->submitTag($this->t('tag_alias.index.search')) ?>
<?php }) ?>

2
app/views/wiki/_sidebar.php
View File

@ -2,7 +2,7 @@
<div style="margin-bottom: 1em;">
<h6>Search</h6>
<?= $this->formTag(['action' => "index"], ['method' => "get"], function(){ ?>
<?= $this->textFieldTag("query", $this->params()->query, ['size' => 20, 'id' => "search-box"]) ?>
<?= $this->textFieldTag("query", $this->h($this->params()->query), ['size' => 20, 'id' => "search-box"]) ?>
<?php }) ?>
</div>