Update of /var/cvs/html/mmbase/components/core/components
In directory james.mmbase.org:/tmp/cvs-serv580
Modified Files:
blockType.jspx
Log Message:
escape descriptions, which may e.g. contains ampersands
See also: http://cvs.mmbase.org/viewcvs/html/mmbase/components/core/components
Index: blockType.jspx
===================================================================
RCS file: /var/cvs/html/mmbase/components/core/components/blockType.jspx,v
retrieving revision 1.5
retrieving revision 1.6
diff -u -b -r1.5 -r1.6
--- blockType.jspx 27 Jun 2008 12:39:45 -0000 1.5
+++ blockType.jspx 11 Jul 2008 16:04:56 -0000 1.6
@@ -8,7 +8,7 @@
<c:forEach items="${blockType.subTypes}" var="bt">
<mm:write request="blockType" referid="bt" />
<li>
- <jsp:text>${bt.name}: ${mm:string(bt.title)} (${bt.weight})</jsp:text>
+ <jsp:text>${bt.name}: ${mm:escape('text/xml', mm:string(bt.title))}
(${bt.weight})</jsp:text>
<mm:include page="blockType.jspx" />
</li>
</c:forEach>
@@ -19,7 +19,7 @@
<mm:link page="components">
<mm:param name="component">${block.component.name}</mm:param>
<a href="${_}">${block.component.name}</a>
- <jsp:text>: ${block.name}: ${mm:string(block.title)}</jsp:text>
+ <jsp:text>: ${block.name}: ${mm:escape('text/xml',
mm:string(block.title))}</jsp:text>
</mm:link>
</li>
</mm:stringlist>
_______________________________________________
Cvs mailing list
[email protected]
http://lists.mmbase.org/mailman/listinfo/cvs
