$rows = $GLOBALS['TYPO3_DB']->exec_SELECTgetRows('domainName,sorting', 'sys_domain',
'pid=' . $GLOBALS['TYPO3_DB']->quoteStr($row['uid'], 'sys_domain'), '', 'sorting', 1);
if (is_array($rows) && count($rows) > 0) {
- $title = sprintf('%s [%s]', $title, $rows[0]['domainName']);
+ $title = sprintf('%s [%s]', $title, htmlspecialchars($rows[0]['domainName']));
}
}
return $title;
* @return string Wrapping title string.
*/
function wrapTitle($title,$v,$ext_pArrPages) {
- $title = htmlspecialchars($title);
-
if ($ext_pArrPages) {
$ficon=t3lib_iconWorks::getIcon('pages',$v);
$onClick = "return insertElement('pages', '".$v['uid']."', 'db', ".t3lib_div::quoteJSvalue($v['title']).", '', '', '".$ficon."','',1);";
* @return string Wrapping title string.
*/
function wrapTitle($title,$v) {
- $title = htmlspecialchars($title);
-
if ($this->ext_isLinkable($v)) {
$aOnClick = 'return jumpToUrl(\''.$this->thisScript.'?act='.$GLOBALS['SOBE']->browser->act.'&mode='.$GLOBALS['SOBE']->browser->mode.'&expandFolder='.rawurlencode($v['path']).'\');';
return '<a href="#" onclick="'.htmlspecialchars($aOnClick).'">'.$title.'</a>';
// Put table row with folder together:
$out.='
<tr class="'.$bgColorClass.'">
- <td nowrap="nowrap">'.$v['HTML'].$this->wrapTitle(t3lib_div::fixed_lgd_cs($v['row']['title'],$titleLen),$v['row']).'</td>
+ <td nowrap="nowrap">' . $v['HTML'] . $this->wrapTitle(htmlspecialchars(t3lib_div::fixed_lgd_cs($v['row']['title'], $titleLen)), $v['row']) . '</td>
'.$arrCol.'
<td>'.$cEbullet.'</td>
</tr>';
* @return string Wrapping title string.
*/
function wrapTitle($title,$v) {
- $title = htmlspecialchars($title);
-
if ($this->ext_isLinkable($v)) {
$aOnClick = 'return jumpToUrl(\''.$this->thisScript.'?act='.$GLOBALS['SOBE']->browser->act.'&mode='.$GLOBALS['SOBE']->browser->mode.'&expandFolder='.rawurlencode($v['path']).'\');';
return '<a href="#" onclick="'.htmlspecialchars($aOnClick).'">'.$title.'</a>';