[Rt-commit] r3226 - in rt/branches/3.4-RELEASE: . html/Admin/Elements

kevinr at bestpractical.com kevinr at bestpractical.com
Sat Jun 18 22:37:52 EDT 2005


Author: kevinr
Date: Sat Jun 18 22:37:51 2005
New Revision: 3226

Modified:
   rt/branches/3.4-RELEASE/   (props changed)
   rt/branches/3.4-RELEASE/html/Admin/Elements/ListGlobalScrips
Log:
 r4496 at sad-girl-in-snow:  kevinr | 2005-06-18 21:37:27 -0500
 * Fixes possible cross-site scripting bug.


Modified: rt/branches/3.4-RELEASE/html/Admin/Elements/ListGlobalScrips
==============================================================================
--- rt/branches/3.4-RELEASE/html/Admin/Elements/ListGlobalScrips	(original)
+++ rt/branches/3.4-RELEASE/html/Admin/Elements/ListGlobalScrips	Sat Jun 18 22:37:51 2005
@@ -54,7 +54,13 @@
 
 %   while (my $scrip = $Scrips->Next ) {
 <LI>
-<a href="<%$RT::WebPath%>/Admin/Global/Scrip.html?id=<%$scrip->Id%>&Queue=<%0%>"><% $scrip->Description || "<i>(".loc('Scrip #[_1]', $scrip->Id).")</i>" |n %></a><br>
+<a href="<%$RT::WebPath%>/Admin/Global/Scrip.html?id=<%$scrip->Id%>&Queue=<%0%>">
+% if ($scrip->Description) {
+<%   $scrip->Description %> 
+% } else {
+<i>(<&/l, $scrip->Id&>Scrip #[_1]</&>)</i>
+% }
+</a><br>
 <small><&|/l, loc($scrip->ConditionObj->Name), loc($scrip->ActionObj->Name), loc($scrip->TemplateObj->Name) &>[_1] [_2] with template [_3]</&></small>
 </LI>
 %   }


More information about the Rt-commit mailing list