diff options
author | lpsolit%gmail.com <> | 2006-10-15 03:26:50 +0000 |
---|---|---|
committer | lpsolit%gmail.com <> | 2006-10-15 03:26:50 +0000 |
commit | b1ef63e5bfc0d3995245b42154686db1400b2c22 (patch) | |
tree | 0db4955b3303c2e5565d6e97e8fac62c63147117 /template/en/default/account/prefs/settings.html.tmpl | |
parent | 40aae68e1263b9677285473a9205cef378b451c0 (diff) | |
download | bugs-b1ef63e5bfc0d3995245b42154686db1400b2c22.tar bugs-b1ef63e5bfc0d3995245b42154686db1400b2c22.tar.gz bugs-b1ef63e5bfc0d3995245b42154686db1400b2c22.tar.bz2 bugs-b1ef63e5bfc0d3995245b42154686db1400b2c22.tar.xz bugs-b1ef63e5bfc0d3995245b42154686db1400b2c22.zip |
Bug 206037: [SECURITY] Fix escaping/quoting in edit*.cgi scripts - Patch by Frédéric Buclin <LpSolit@gmail.com> r=justdave a=justdave
Diffstat (limited to 'template/en/default/account/prefs/settings.html.tmpl')
-rw-r--r-- | template/en/default/account/prefs/settings.html.tmpl | 8 |
1 files changed, 4 insertions, 4 deletions
diff --git a/template/en/default/account/prefs/settings.html.tmpl b/template/en/default/account/prefs/settings.html.tmpl index 3ef9a5852..568dac0cb 100644 --- a/template/en/default/account/prefs/settings.html.tmpl +++ b/template/en/default/account/prefs/settings.html.tmpl @@ -49,8 +49,8 @@ </td> <td> [% IF settings.${name}.is_enabled %] - <select name="[% name %]" id="[% name %]"> - <option value="[% default_name %]" + <select name="[% name FILTER html %]" id="[% name FILTER html %]"> + <option value="[% default_name FILTER html %]" [% ' selected="selected"' IF settings.${name}.is_default %]> Site Default ([% setting_descs.${default_val} OR default_val FILTER html %]) </option> @@ -64,8 +64,8 @@ [% END %] </select> [% ELSE %] - <select name="[% name %]" id="[% name %]" disabled="disabled"> - <option value="[% default_name %]"> + <select name="[% name FILTER html %]" id="[% name FILTER html %]" disabled="disabled"> + <option value="[% default_name FILTER html %]"> Site Default ([% setting_descs.${default_val} OR default_val FILTER html %]) </option> </select> |