AS1024
/
Kanboard-Prod
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Avoid stored XSS in task external link

This commit is contained in:
Frédéric Guillot 2023-05-28 21:10:33 -07:00 committed by Frédéric Guillot
parent c20be8f5fa
commit 05f1d23d82
2 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
app/Template/board/tooltip_external_links.php
View File

@ -11,7 +11,7 @@
<?= $link['type'] ?> <?= $link['type'] ?>
</td> </td>
<td> <td>
<a href="<?= $link['url'] ?>" title="<?= $this->text->e($link['url']) ?>" target="_blank"><?= $this->text->e($link['title']) ?></a> <a href="<?= $this->text->e($link['url']) ?>" title="<?= $this->text->e($link['url']) ?>" target="_blank"><?= $this->text->e($link['title']) ?></a>
</td> </td>
<td> <td>
<?= $this->text->e($link['dependency_label']) ?> <?= $this->text->e($link['dependency_label']) ?>

2
app/Template/task_external_link/table.php
View File

@ -29,7 +29,7 @@
<?= $this->text->e($link['type']) ?> <?= $this->text->e($link['type']) ?>
</td> </td>
<td> <td>
<a href="<?= $link['url'] ?>" title="<?= $this->text->e($link['url']) ?>" target="_blank"><?= $this->text->e($link['title']) ?><span class="ui-helper-hidden-accessible"> (<?= $this->text->e($link['url']) ?>)</span></a> <a href="<?= $this->text->e($link['url']) ?>" title="<?= $this->text->e($link['url']) ?>" target="_blank"><?= $this->text->e($link['title']) ?><span class="ui-helper-hidden-accessible"> (<?= $this->text->e($link['url']) ?>)</span></a>
</td> </td>
<td> <td>
<?= $this->text->e($link['dependency_label']) ?> <?= $this->text->e($link['dependency_label']) ?>