Skip to content

Conversation

@zero-24
Copy link
Contributor

@zero-24 zero-24 commented May 11, 2016

Pull Request for Issue #10399 .

Summary of Changes

Always use htmlspecialchars($str, ENT_COMPAT, 'UTF-8')

Testing Instructions

Please review or test every file. Thanks

</dt>
<dd>
<?php echo $this->data->name; ?>
<?php echo htmlspecialchars($this->data->name, ENT_COMPAT, 'UTF-8'); ?>
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

showing my ignorance perhaps but why did you add it to this one. surely it has already been filtered

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

reverted.

@wojsmol
Copy link
Contributor

wojsmol commented May 14, 2016

@zero-24 see zero-24#15

@andrepereiradasilva
Copy link
Contributor

seems fine to me now.

$bootstrapSize = (int) $params->get('bootstrap_size');
$moduleClass = ($bootstrapSize) ? ' span' . $bootstrapSize : '';
$headerTag = htmlspecialchars($params->get('header_tag', 'h2'));
$headerTag = htmlspecialchars($params->get('header_tag', 'h2'), ENT_COMPAT, 'UTF-8');
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

is this in the right place?

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

yes

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

ok thanks

@andrepereiradasilva
Copy link
Contributor

I have tested this item ✅ successfully on c642195

on code review


This comment was created with the J!Tracker Application at issues.joomla.org/joomla-cms/10424.

@brianteeman
Copy link
Contributor

I have tested this item ✅ successfully on c642195


This comment was created with the J!Tracker Application at issues.joomla.org/joomla-cms/10424.

@brianteeman
Copy link
Contributor

RTC


This comment was created with the J!Tracker Application at issues.joomla.org/joomla-cms/10424.

@joomla-cms-bot joomla-cms-bot added the RTC This Pull Request is Ready To Commit label May 18, 2016
@brianteeman brianteeman added this to the Joomla 3.6.0 milestone May 18, 2016
@roland-d roland-d merged commit d86ba26 into joomla:staging May 20, 2016
@joomla-cms-bot joomla-cms-bot removed the RTC This Pull Request is Ready To Commit label May 20, 2016
@roland-d
Copy link
Contributor

Thanks everybody

@zero-24 zero-24 deleted the patch-29 branch May 20, 2016 18:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

6 participants