[TYPO3-core] RFC: pi_openAtagHrefInJSwindow() applies htmlspecialchars() twice

Michael Stucki michael at typo3.org
Tue Nov 7 10:54:00 CET 2006


This is a SVN patch request.

Problem:
The input string for pi_openAtagHrefInJSwindow() needs to be an complete <a
href="..."> element, so it is clear that this must have htmlspecialchars()
applied. However, when sending out the resulting JavaScript link, the whole
content is sent through htmlspecialchars() again.

Solution:
I have removed the htmlspecialchars() call around the full output string but
added two new ones for $winName and $winParams only.

Branches: TYPO3_4-0 and Trunk

- michael
-- 
Use a newsreader! Check out
http://typo3.org/community/mailing-lists/use-a-news-reader/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: pi_openAtagHrefInJSwindow_noHtmlSpecialChars.diff
Type: text/x-diff
Size: 1146 bytes
Desc: not available
Url : http://lists.netfielders.de/pipermail/typo3-team-core/attachments/20061107/9eb19579/attachment.bin 


More information about the TYPO3-team-core mailing list