Skip to content

[next batch] Always use htmlspecialchars($str, ENT_COMPAT, 'UTF-8')#10424

Merged
roland-d merged 14 commits intojoomla:stagingfrom
zero-24:patch-29
May 20, 2016
Merged

[next batch] Always use htmlspecialchars($str, ENT_COMPAT, 'UTF-8')#10424
roland-d merged 14 commits intojoomla:stagingfrom
zero-24:patch-29

Conversation

@zero-24
Copy link
Copy Markdown
Contributor

@zero-24 zero-24 commented May 11, 2016

Pull Request for Issue #10399 .

Summary of Changes

Always use htmlspecialchars($str, ENT_COMPAT, 'UTF-8')

Testing Instructions

Please review or test every file. Thanks

</dt>
<dd>
<?php echo $this->data->name; ?>
<?php echo htmlspecialchars($this->data->name, ENT_COMPAT, 'UTF-8'); ?>
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

showing my ignorance perhaps but why did you add it to this one. surely it has already been filtered

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

reverted.

@wojsmol
Copy link
Copy Markdown
Contributor

wojsmol commented May 14, 2016

@zero-24 see zero-24#15

@andrepereiradasilva
Copy link
Copy Markdown
Contributor

seems fine to me now.

$bootstrapSize = (int) $params->get('bootstrap_size');
$moduleClass = ($bootstrapSize) ? ' span' . $bootstrapSize : '';
$headerTag = htmlspecialchars($params->get('header_tag', 'h2'));
$headerTag = htmlspecialchars($params->get('header_tag', 'h2'), ENT_COMPAT, 'UTF-8');
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

is this in the right place?

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

yes

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

ok thanks

@andrepereiradasilva
Copy link
Copy Markdown
Contributor

I have tested this item ✅ successfully on c642195

on code review


This comment was created with the J!Tracker Application at issues.joomla.org/joomla-cms/10424.

@brianteeman
Copy link
Copy Markdown
Contributor

I have tested this item ✅ successfully on c642195


This comment was created with the J!Tracker Application at issues.joomla.org/joomla-cms/10424.

@brianteeman
Copy link
Copy Markdown
Contributor

RTC


This comment was created with the J!Tracker Application at issues.joomla.org/joomla-cms/10424.

@joomla-cms-bot joomla-cms-bot added the RTC This Pull Request is Ready To Commit label May 18, 2016
@brianteeman brianteeman added this to the Joomla 3.6.0 milestone May 18, 2016
@roland-d roland-d merged commit d86ba26 into joomla:staging May 20, 2016
@joomla-cms-bot joomla-cms-bot removed the RTC This Pull Request is Ready To Commit label May 20, 2016
@roland-d
Copy link
Copy Markdown
Contributor

Thanks everybody

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

6 participants