From 1c65ca492295e754dfd9986f91b08eb0876d09b9 Mon Sep 17 00:00:00 2001 From: joey Date: Wed, 21 Mar 2007 06:05:21 +0000 Subject: * Fix a few bugs around page titles containing html. The worst of these is an actual security hole as it allows insertion of html into the title element of a page, which is not processed by the htmlscrubber. --- templates/archivepage.tmpl | 2 +- templates/inlinepage.tmpl | 4 ++-- templates/page.tmpl | 4 ++-- templates/titlepage.tmpl | 2 +- 4 files changed, 6 insertions(+), 6 deletions(-) (limited to 'templates') diff --git a/templates/archivepage.tmpl b/templates/archivepage.tmpl index 6bc789dfb..7e8b8b8fc 100644 --- a/templates/archivepage.tmpl +++ b/templates/archivepage.tmpl @@ -1,5 +1,5 @@

-
+
Posted diff --git a/templates/inlinepage.tmpl b/templates/inlinepage.tmpl index 0317c248c..f1f21d4be 100644 --- a/templates/inlinepage.tmpl +++ b/templates/inlinepage.tmpl @@ -10,9 +10,9 @@ - + - + diff --git a/templates/page.tmpl b/templates/page.tmpl index 471ed1a7d..2c28a68f5 100644 --- a/templates/page.tmpl +++ b/templates/page.tmpl @@ -3,7 +3,7 @@ -<TMPL_VAR TITLE> +<TMPL_VAR TITLE ESCAPE=HTML> @@ -19,7 +19,7 @@ / - + diff --git a/templates/titlepage.tmpl b/templates/titlepage.tmpl index f5cd5bc53..0676a098e 100644 --- a/templates/titlepage.tmpl +++ b/templates/titlepage.tmpl @@ -1 +1 @@ -

+

-- cgit v1.2.3