[TYPO3-bugs] RFC: pi_openAtagHrefInJSwindow() applies htmlspecialchars() twice

Michael Stucki michael at typo3.org
Tue Nov 7 10:45:47 CET 2006


This is a SVN patch request.

Problem:
The input string for pi_openAtagHrefInJSwindow() needs to be an complete <a
href="..."> element, so it is clear that this must have htmlspecialchars()
applied. However, when sending out the resulting JavaScript link, the whole
content is sent through htmlspecialchars() again.

Solution:
I have removed the htmlspecialchars() call around the full output string but
added two new ones for $winName and $winParams only.

Branches: TYPO3_4-0 and Trunk

- michael
-- 
Use a newsreader! Check out
http://typo3.org/community/mailing-lists/use-a-news-reader/


More information about the TYPO3-team-bugs mailing list