[TikiWiki-commits] [Git][tikiwiki/tiki][28.x] [BP][FIX] fix javascript unexcaped Tag

"ushindi bienvenu \(@usbbush\) via TikiWiki-cvs" <[email protected]>
Newsgroups gmane.comp.cms.tiki.cvs
Message-ID <688cb7435cd9_2c3b527c021356@gitlab-sidekiq-low-urgency-cpu-bound-v2-78ddbdb4c5-chf64.mail>

ushindi bienvenu pushed to branch 28.x at Tiki Wiki CMS Groupware / Tiki


Commits:
dcc9d6d0 by Camile at 2025-08-01T12:41:16+00:00
[BP][FIX] fix javascript unexcaped Tag
---
* [FIX] fix javascript unexcaped Tag
---
* [FIX] fix javascript unexcaped Tag

* [FIX] fix javascript unexcaped Tag

See merge request tikiwiki/tiki!7856

See merge request tikiwiki/tiki!8115

- - - - -


1 changed file:

- templates/tiki-browse_freetags.tpl


Changes:

=====================================
templates/tiki-browse_freetags.tpl
=====================================
@@ -97,7 +97,7 @@
                     {capture name=tagurl}{if (strstr($popular_tag.tag, ' '))}"{$popular_tag.tag}"{else}{$popular_tag.tag}{/if}{/capture}
                     <a class="freetag_{$popular_tag.size}{if $tag eq $popular_tag.tag|escape} selectedtag{/if}" 
                         href="tiki-browse_freetags.php?tag={$smarty.capture.tagurl|escape:'url'}{if $broaden eq 'y'}&amp;broaden=y{/if}" 
-                        onclick="javascript:addTag('{$popular_tag.tag|escape:'javascript'}');return false;" 
+                        onclick="javascript:addTag('{$popular_tag.tag|escape:'javascript'|escape:'htmlall'}');return false;"
                         ondblclick="location.href=this.href;"
                         {if !empty($popular_tag.color)} style="color:{$popular_tag.color}"{/if}>
                         {$popular_tag.tag|escape}



View it on GitLab: https://gitlab.com/tikiwiki/tiki/-/commit/dcc9d6d0d19385b78ca5a3092ffffc89607e8311

-- 
View it on GitLab: https://gitlab.com/tikiwiki/tiki/-/commit/dcc9d6d0d19385b78ca5a3092ffffc89607e8311
You're receiving this email because of your account on gitlab.com.

_______________________________________________
TikiWiki-cvs mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/tikiwiki-cvs
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.