Преглед на файлове

#875 Could not use OQL queries with a double quote in the condition

git-svn-id: http://svn.code.sf.net/p/itop/code/trunk@3159 a333f486-631f-4898-b8df-5754b55c2be0
romainq преди 11 години
родител
ревизия
69895eff45
променени са 1 файла, в които са добавени 1 реда и са изтрити 1 реда
  1. 1 1
      application/webpage.class.inc.php

+ 1 - 1
application/webpage.class.inc.php

@@ -657,7 +657,7 @@ class WebPage implements Page
 		foreach ($aActions as $aAction)
 		{
 			$sClass = isset($aAction['class']) ? " class=\"{$aAction['class']}\"" : "";
-			$sOnClick = isset($aAction['onclick']) ? " onclick=\"{$aAction['onclick']}\"" : "";
+			$sOnClick = isset($aAction['onclick']) ? ' onclick="'.htmlspecialchars($aAction['onclick'], ENT_QUOTES, "UTF-8").'"' : '';
 			$sTarget = isset($aAction['target']) ? " target=\"{$aAction['target']}\"" : "";
 			if (empty($aAction['url']))
 			{