Browse Source

#875 Could not use OQL queries with a double quote in the condition

git-svn-id: http://svn.code.sf.net/p/itop/code/trunk@3159 a333f486-631f-4898-b8df-5754b55c2be0
romainq 11 years ago
parent
commit
69895eff45
1 changed files with 1 additions and 1 deletions
  1. 1 1
      application/webpage.class.inc.php

+ 1 - 1
application/webpage.class.inc.php

@@ -657,7 +657,7 @@ class WebPage implements Page
 		foreach ($aActions as $aAction)
 		{
 			$sClass = isset($aAction['class']) ? " class=\"{$aAction['class']}\"" : "";
-			$sOnClick = isset($aAction['onclick']) ? " onclick=\"{$aAction['onclick']}\"" : "";
+			$sOnClick = isset($aAction['onclick']) ? ' onclick="'.htmlspecialchars($aAction['onclick'], ENT_QUOTES, "UTF-8").'"' : '';
 			$sTarget = isset($aAction['target']) ? " target=\"{$aAction['target']}\"" : "";
 			if (empty($aAction['url']))
 			{