Changeset 717 for trunk/lib

Timestamp:

Feb 13, 2020 9:29:19 PM (4 years ago)

Author:

anonymous

Message:

Strip tags from sort header title attributes

File:

• trunk/lib/SortOrder.inc.php (modified) (2 diffs)

trunk/lib/SortOrder.inc.php

@@ -222 +222 @@
                 }
             } else {
-                ?><a href="<?php echo $app->oHREF($this->base_url . '?sort=' . $col . '&order=' . $default_order); ?>" data-tooltip title="<?php echo sprintf(_("Sort by %s"), $col_name); ?>" class="sc-sort"><?php echo $col_name; ?></a><?php
+                ?><a href="<?php echo $app->oHREF($this->base_url . '?sort=' . $col . '&order=' . $default_order); ?>" data-tooltip title="<?php echo sprintf(_("Sort by %s"), strip_tags($col_name)); ?>" class="sc-sort"><?php echo $col_name; ?></a><?php
             }
         } else {
@@ -250 +250 @@
                 $col,
                 ($this->sort_by == $col ? ' selected="selected"' : ''),
-                $col_name
+                strip_tags($col_name)
             );
         }