mirror of
https://github.com/EGroupware/egroupware.git
synced 2024-11-25 09:23:28 +01:00
select: fixed quoting of option texts in selectbox,
htmlspecialchars: dont quote < > as they are already entities
This commit is contained in:
parent
fa30c02528
commit
f5656e49f4
@ -130,7 +130,7 @@ class html
|
|||||||
$str = @htmlspecialchars($str,ENT_COMPAT,$this->charset);
|
$str = @htmlspecialchars($str,ENT_COMPAT,$this->charset);
|
||||||
|
|
||||||
// we need '&#' unchanged, so we translate it back
|
// we need '&#' unchanged, so we translate it back
|
||||||
$str = str_replace('&#','&#',$str);
|
$str = str_replace(array('&#','&nbsp;','&lt;','&gt;'),array('&#',' ','<','>'),$str);
|
||||||
|
|
||||||
return $str;
|
return $str;
|
||||||
}
|
}
|
||||||
@ -176,7 +176,7 @@ class html
|
|||||||
{
|
{
|
||||||
$out .= ' selected="1"';
|
$out .= ' selected="1"';
|
||||||
}
|
}
|
||||||
$out .= ">" . ($no_lang || $text == '' ? $text : lang($text)) . "</option>\n";
|
$out .= ">" . $this->htmlspecialchars($no_lang || $text == '' ? $text : lang($text)) . "</option>\n";
|
||||||
}
|
}
|
||||||
$out .= "</select>\n";
|
$out .= "</select>\n";
|
||||||
|
|
||||||
|
Loading…
Reference in New Issue
Block a user