Beanz/flatpress
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix XSS

Browse Source
This commit is contained in:
real_nowhereman 2011-06-08 18:20:35 +00:00
parent 08ab6692cf
commit dcfe3dceb7
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
fp-interface/sharedtpls/comment-form.tpl
View File

@ -19,17 +19,17 @@
<div id="comment-userdata">
<p>
<input type="text" {$error.name|notempty:'class="field-error"'} name="name" id="name" value="{$values.name|default:$cookie.name}" />
<input type="text" {$error.name|notempty:'class="field-error"'} name="name" id="name" value="{$values.name|wp_specialchars:1|default:$cookie.name}" />
<label class="textlabel" for="name">{$lang.comments.name}</label>
</p>
<p>
<input type="text" {$error.email|notempty:'class="field-error"'} name="email" id="email" value="{$values.email|default:$cookie.email}" />
<input type="text" {$error.email|notempty:'class="field-error"'} name="email" id="email" value="{$values.email|wp_specialchars:1|default:$cookie.email}" />
<label class="textlabel" for="email">{$lang.comments.email}</label>
</p>
<p>
<input type="text" {$error.url|notempty:'class="field-error"'} name="url" id="url" value="{$values.url|default:$cookie.url}" />
<input type="text" {$error.url|notempty:'class="field-error"'} name="url" id="url" value="{$values.url|wp_specialchars:1|default:$cookie.url}" />
<label class="textlabel" for="url">{$lang.comments.www}</label>
</p>