* Raised Extbase and Fluid from 1.2.0 to 1.2.1
* Fixed bug #14953: XSS in (new) taskcenter (thanks to Georg Ringer)
+ * Fixed bug #14978: XSS in file tree (thanks to Georg Ringer)
2010-07-27 Steffen Kamper <steffen@typo3.org>
* @return string Wrapping title string.
*/
function wrapTitle($title,$v,$ext_pArrPages) {
+ $title = htmlspecialchars($title);
+
if ($ext_pArrPages) {
$ficon=t3lib_iconWorks::getIcon('pages',$v);
$onClick = "return insertElement('pages', '".$v['uid']."', 'db', ".t3lib_div::quoteJSvalue($v['title']).", '', '', '".$ficon."','',1);";
* @return string Wrapping title string.
*/
function wrapTitle($title,$v) {
+ $title = htmlspecialchars($title);
+
if ($this->ext_isLinkable($v)) {
$aOnClick = 'return jumpToUrl(\''.$this->thisScript.'?act='.$GLOBALS['SOBE']->browser->act.'&mode='.$GLOBALS['SOBE']->browser->mode.'&expandFolder='.rawurlencode($v['path']).'\');';
return '<a href="#" onclick="'.htmlspecialchars($aOnClick).'">'.$title.'</a>';
* @return string Wrapping title string.
*/
function wrapTitle($title,$v) {
+ $title = htmlspecialchars($title);
+
if ($this->ext_isLinkable($v)) {
$aOnClick = 'return jumpToUrl(\''.$this->thisScript.'?act='.$GLOBALS['SOBE']->browser->act.'&mode='.$GLOBALS['SOBE']->browser->mode.'&expandFolder='.rawurlencode($v['path']).'\');';
return '<a href="#" onclick="'.htmlspecialchars($aOnClick).'">'.$title.'</a>';
* @return string Wrapping title string.
*/
function wrapTitle($title,$v) {
+ $title = htmlspecialchars($title);
+
if ($this->ext_isLinkable($v)) {
$aOnClick = 'return jumpToUrl(\''.$this->thisScript.'?act='.$GLOBALS['SOBE']->browser->act.'&editorNo='.$GLOBALS['SOBE']->browser->editorNo.'&contentTypo3Language='.$GLOBALS['SOBE']->browser->contentTypo3Language.'&contentTypo3Charset='.$GLOBALS['SOBE']->browser->contentTypo3Charset.'&mode='.$GLOBALS['SOBE']->browser->mode.'&expandFolder='.rawurlencode($v['path']).'\');';
return '<a href="#" onclick="'.htmlspecialchars($aOnClick).'">'.$title.'</a>';
* @return string Wrapping title string.
*/
function wrapTitle($title,$v) {
+ $title = htmlspecialchars($title);
+
if ($this->ext_isLinkable($v)) {
$aOnClick = 'return jumpToUrl(\'?editorNo='.$GLOBALS['SOBE']->browser->editorNo.'&expandFolder='.rawurlencode($v['path']).'\');';
return '<a href="#" onclick="'.htmlspecialchars($aOnClick).'">'.$title.'</a>';