|
@@ -657,7 +657,7 @@ class WebPage implements Page
|
|
foreach ($aActions as $aAction)
|
|
foreach ($aActions as $aAction)
|
|
{
|
|
{
|
|
$sClass = isset($aAction['class']) ? " class=\"{$aAction['class']}\"" : "";
|
|
$sClass = isset($aAction['class']) ? " class=\"{$aAction['class']}\"" : "";
|
|
- $sOnClick = isset($aAction['onclick']) ? " onclick=\"{$aAction['onclick']}\"" : "";
|
|
|
|
|
|
+ $sOnClick = isset($aAction['onclick']) ? ' onclick="'.htmlspecialchars($aAction['onclick'], ENT_QUOTES, "UTF-8").'"' : '';
|
|
$sTarget = isset($aAction['target']) ? " target=\"{$aAction['target']}\"" : "";
|
|
$sTarget = isset($aAction['target']) ? " target=\"{$aAction['target']}\"" : "";
|
|
if (empty($aAction['url']))
|
|
if (empty($aAction['url']))
|
|
{
|
|
{
|