mirror of
https://github.com/inverse-inc/sogo.git
synced 2026-05-30 07:35:39 +00:00
(fix) properly escape values (fixes #3241)
This commit is contained in:
committed by
Francis Lachapelle
parent
617fcbbf19
commit
d91d5b7a2d
@@ -70,11 +70,11 @@
|
||||
|
||||
<var:foreach list="personalContactInfos" item="currentContact">
|
||||
<tr var:class="currentContactClasses"
|
||||
var:categories="currentContact.c_categories"
|
||||
var:id="currentContact.c_name"
|
||||
var:contactname="currentContact.c_cn">
|
||||
<td class="displayName" var:title="currentContact.c_cn"><var:string value="currentContact.c_cn" const:escapeHTML="YES" /></td>
|
||||
<td var:title="currentContact.c_mail"><var:string value="currentContact.c_mail"/></td>
|
||||
var:categories="currentContact.c_categories.safeStringByEscapingXMLString"
|
||||
var:id="currentContact.c_name.asCSSIdentifier"
|
||||
var:contactname="currentContact.c_cn.safeStringByEscapingXMLString">
|
||||
<td class="displayName" var:title="currentContact.c_cn.safeStringByEscapingXMLString"><var:string value="currentContact.c_cn" const:escapeHTML="YES" /></td>
|
||||
<td var:title="currentContact.c_mail.safeStringByEscapingXMLString"><var:string value="currentContact.c_mail"/></td>
|
||||
</tr>
|
||||
</var:foreach>
|
||||
|
||||
|
||||
Reference in New Issue
Block a user