CC-4894: Need to filter output for potential XSS exploits

-fixed few areas
2013-01-29 15:17:29 -05:00 · 2013-01-29 15:17:29 -05:00 · b15c4569eb
commit b15c4569eb
parent 9d4e0d2dd1
9 changed files with 20 additions and 9 deletions
--- a/airtime_mvc/application/views/scripts/playlist/playlist.phtml
+++ b/airtime_mvc/application/views/scripts/playlist/playlist.phtml
@ -39,7 +39,7 @@ if (isset($this->obj)) {
    <input id='obj_type' type='hidden' value='playlist'></input>
    <div class="playlist_title">
        <h3 id="obj_name">
-            <a id="playlist_name_display" contenteditable="true"><?php echo $this->obj->getName(); ?></a>
+            <a id="playlist_name_display" contenteditable="true"><?php echo $this->escape($this->obj->getName()); ?></a>
        </h3>
        <h4 id="obj_length"><?php echo $this->length; ?></h4>
    </div>