oqapi/webgui
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

encode html entities when used in a setLink or setScript attribute value

Browse source
This commit is contained in:
Graham Knop 2008-11-12 21:28:18 +00:00
parent d3c990b252
commit 149337d77d
1 changed files with 3 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

5
lib/WebGUI/Session/Style.pm
View file

@ -21,6 +21,7 @@ use WebGUI::International;
use WebGUI::Macro;
use WebGUI::Asset::Template;
use WebGUI;
use HTML::Entities ();
=head1 NAME
@ -281,7 +282,7 @@ sub setLink {
return undef if ($self->{_link}{$url});
my $tag = '<link href="'.$url.'"';
foreach my $name (keys %{$params}) {
$tag .= ' '.$name.'="'.$params->{$name}.'"';
$tag .= ' '.$name.'="'.HTML::Entities::encode($params->{$name}).'"';
}
$tag .= ' />'."\n";
$self->{_link}{$url} = 1;
@ -391,7 +392,7 @@ sub setScript {
return undef if ($self->{_javascript}{$url});
my $tag = '<script src="'.$url.'"';
foreach my $name (keys %{$params}) {
$tag .= ' '.$name.'="'.$params->{$name}.'"';
$tag .= ' '.$name.'="'.HTML::Entities::encode($params->{$name}).'"';
}
$tag .= '></script>'."\n";
$self->{_javascript}{$url} = 1;