Bug #133
Player names not properly escaped in Servers page.
| Status: | Closed | Start: | 07/06/2008 | |
| Priority: | Normal | Due date: | ||
| Assigned to: | - | % Done: | 100% |
|
| Category: | Web Panel | |||
| Target version: | 1.1.1 | |||
Description
Players with special HTML characters are not being properly escaped.
To fix the default theme, change line 42 of sb_root/themes/default/page_servers.tpl
From
<td class="listtable_1">{$player.name}</td>
To
<td class="listtable_1">{$player.name|escape:'htmlall'}</td>
History
Updated by Recon _ 184 days ago
For some reason, the code didn't post properly...
Players with special HTML characters in their names are not being properly escaped in the server page.
To fix the default theme, change line 42 of sb_root/themes/default/page_servers.tpl
From
<td class="listtable_1">{$player.name}</td>
To
<td class="listtable_1">{$player.name|escape:'htmlall'}</td>
Updated by Erik Minekus 171 days ago
- Category set to Web Panel
- Status changed from New to Closed
- Target version set to 1.1.1
- % Done changed from 0 to 100