[TYPO3-core] RFC: #8019: missing htmlspecialchars in admPanel

[Steffen Kamper]

"Martin Kutschker" <Martin.Kutschker at n0spam-blackbox.net> schrieb im 
Newsbeitrag 
news:mailman.1.1208427371.6784.typo3-team-core at lists.netfielders.de...
> Steffen Kamper schrieb:
>> Hi
>>
>> This is an SVN patch request.
>>
>> Type: Bugfix
>>
>> Bugtracker references:
>> http://bugs.typo3.org/view.php?id=8019
>>
>> Branches: 4.2
>>
>> In Admin Panel there are some missing htmlspecialchars which can break 
>> the
>> output HTML
>>
>> I added it for $row['title'] and $GLOBALS['TSFE']->page['title']
>
> And added also a double encoding in he first hunk for the group select 
> box.
>
> Masi

*shame* was wrong reading, sry

i removed that.

vg Steffen 


begin 666 8019_admPanel_htmlspecialchars2.diff
M26YD97 at Z('0S;&EB+V-L87-S+G0S;&EB7W1S9F5B975S97)A=71H+G!H< T*
M/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T]
M/3T]/3T]/3T]/3T]/3T]/3T]/3T]/0T*+2TM('0S;&EB+V-L87-S+G0S;&EB
M7W1S9F5B975S97)A=71H+G!H< DH<F5V:7-I;VX@,S4Y,BD-"BLK*R!T,VQI
M8B]C;&%S<RYT,VQI8E]T<V9E8F5U<V5R875T:"YP:' )*'=O<FMI;F<@8V]P
M>2D-"D! ("TS,S8L-R K,S,V+#<@0$ -"B )"0DD9&5P=&@@/2 D=&AI<RT^
M97AT1V5T1F5!9&UI;E9A;'5E*"=C86-H92<L)V-L96%R0V%C:&5,979E;',G
M*3L*( D)"21O=71486)L92 ]("<G.PH@"0D))'1H:7,M/F5X=%!A9V5);E1R
M965);F9O(#T at 87)R87DH*3L*+0D)"21T:&ES+3YE>'1086=E26Y4<F5E26YF
M;UM=(#T at 87)R87DH)$=,3T)!3%-;)U131D4G72T^<&%G95LG=6ED)UTL)$=,
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M5F%L=64H)W!U8FQI<V at G+"=L979E;',G*3L*( D)"21O=71486)L92 ]("<G
M.PH@"0D))'1H:7,M/F5X=%!A9V5);E1R965);F9O(#T at 87)R87DH*3L*+0D)
M"21T:&ES+3YE>'1086=E26Y4<F5E26YF;UM=(#T at 87)R87DH)$=,3T)!3%-;
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/26Y4<F5E26YF;RDI('L*
`
end