LupusNobilis
/
sogo
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Mail notifications: Escape HTML in wox templates 

We don't escape the values in the classes but in the templates.
pull/13/head
Francis Lachapelle 2013-09-03 12:05:13 -04:00
parent dceead3997
commit 69b0f9fcbf
2 changed files with 5 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
SoObjects/Appointments/SOGoAptMailNotification.m
View File

@ -1,5 +1,5 @@
/*
Copyright (C) 2006-2012 Inverse inc.
Copyright (C) 2006-2013 Inverse inc.
Copyright (C) 2000-2005 SKYRIX Software AG
This file is part of SOGo.
@ -142,12 +142,12 @@
- (NSString *) location
{
return [[apt location] stringByEscapingHTMLString];
return [apt location];
}
- (NSString *) summary
{
return [[apt summary] stringByEscapingHTMLString];
return [apt summary];
}
- (void) setOrganizerName: (NSString *) theString

4
UI/Templates/Appointments/SOGoAptMailDeletion.wox
View File

@ -24,9 +24,9 @@ h1, dd, .dl-list dt { margin-left: 130px; }
<small><var:string value="organizerName" const:escapeHTML="NO"/><var:string value="sentByText" const:escapeHTML="NO"/></small></h1>
<dl class="dl-horizontal">
<var:if condition="apt.location.length"
<var:if condition="location.length"
><dt><var:string label:value="location_label" const:escapeHTML="NO"/></dt>
<dd><var:string value="apt.location" const:escapeHTML="NO"/></dd></var:if>
<dd><var:string value="location" const:escapeHTML="NO"/></dd></var:if>
<dt><var:string label:value="startDate_label" const:escapeHTML="NO"/></dt>
<dd><var:string value="formattedAptStartDate" const:escapeHTML="NO"
/><var:if condition="formattedAptStartTime.length"> - <var:string value="formattedAptStartTime" const:escapeHTML="NO"/> <var:string value="viewTZ" const:escapeHTML="NO"/>