Author: FabianLange
Date: 2010-01-21 13:32:30 +0100 (Thu, 21 Jan 2010)
New Revision: 26982

Modified:
   
branches/1.2/lib/plugins/sfDoctrinePlugin/lib/debug/sfWebDebugPanelDoctrine.class.php
Log:
[1.2] backported r21879 fix for doctrine debug panel not html-escaping (fixes 
#7972)

Modified: 
branches/1.2/lib/plugins/sfDoctrinePlugin/lib/debug/sfWebDebugPanelDoctrine.class.php
===================================================================
--- 
branches/1.2/lib/plugins/sfDoctrinePlugin/lib/debug/sfWebDebugPanelDoctrine.class.php
       2010-01-21 12:19:54 UTC (rev 26981)
+++ 
branches/1.2/lib/plugins/sfDoctrinePlugin/lib/debug/sfWebDebugPanelDoctrine.class.php
       2010-01-21 12:32:30 UTC (rev 26982)
@@ -149,7 +149,7 @@
   static protected function formatSql($sql)
   {
     $color = "#990099";
-    $newSql = $sql;
+    $newSql = htmlspecialchars($sql, ENT_QUOTES, sfConfig::get('sf_charset'));
     $newSql = str_replace("SELECT ", "<span style=\"color: $color;\"><b>SELECT 
</b></span>  ",$newSql);
     $newSql = str_replace("FROM ", "<span style=\"color: $color;\"><b>FROM 
</b></span>",$newSql);
     $newSql = str_replace(" LEFT JOIN ", "<span style=\"color: $color;\"><b> 
LEFT JOIN </b></span>",$newSql);

-- 
You received this message because you are subscribed to the Google Groups 
"symfony SVN" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/symfony-svn?hl=en.


Reply via email to