Add html escaping

This commit is contained in:
Dennis Eichhorn 2017-07-24 20:48:22 +02:00
parent c2bc80eb29
commit b5142910b4
9 changed files with 100 additions and 100 deletions

View File

@ -1,11 +1,11 @@
<template id="entry-list-tpl">
<div id="entry-list" class="box" style="z-index: 99; position: relative; top: 20px; display: block; margin: 0 auto; width: 20%;">
<table class="table red">
<caption><?= $this->getText('Accounts'); ?></caption>
<caption><?= $this->getHtml('Accounts') ?></caption>
<thead>
<tr>
<td><?= $this->getText('ID', 0, 0); ?>
<td class="wf-100"><?= $this->getText('Account'); ?>
<td><?= $this->getHtml('ID', 0, 0); ?>
<td class="wf-100"><?= $this->getHtml('Account') ?>
<tbody>
</table>
</div>

View File

@ -29,10 +29,10 @@ $footerView->setResults(1);
<form>
<table class="layout wf-100">
<tr>
<td><label for="iAccountStart"><?= $this->getText('Account'); ?></label>
<td><label for="iAccountStart"><?= $this->getText('CostCenter'); ?>
<td><label for="iAccountStart"><?= $this->getText('CostObject'); ?>
<td><label for="iAccountStart"><?= $this->getText('EntryDate'); ?>
<td><label for="iAccountStart"><?= $this->getHtml('Account') ?></label>
<td><label for="iAccountStart"><?= $this->getHtml('CostCenter') ?>
<td><label for="iAccountStart"><?= $this->getHtml('CostObject') ?>
<td><label for="iAccountStart"><?= $this->getHtml('EntryDate') ?>
<tr>
<td><span class="input"><button type="button" id="account-start" formaction="" data-action='[{"type": "popup", "tpl": "entry-list-tpl", "aniIn": "fadeIn", "aniOut": "fadeOut", "stay": 1000}]'><i class="fa fa-book"></i>
</button><input type="number" id="iId" min="1" name="id" required></span>
@ -42,10 +42,10 @@ $footerView->setResults(1);
</button><input type="number" id="iId" min="1" name="id" required></span>
<td><input type="datetime-local" id="iId" min="1" name="id" required>
<tr>
<td><label for="iAccountStart"><?= $this->getText('To'); ?></label>
<td><label for="iAccountStart"><?= $this->getText('To'); ?>
<td><label for="iAccountStart"><?= $this->getText('To'); ?>
<td><label for="iAccountStart"><?= $this->getText('To'); ?>
<td><label for="iAccountStart"><?= $this->getHtml('To') ?></label>
<td><label for="iAccountStart"><?= $this->getHtml('To') ?>
<td><label for="iAccountStart"><?= $this->getHtml('To') ?>
<td><label for="iAccountStart"><?= $this->getHtml('To') ?>
<tr>
<td><span class="input"><button type="button" formaction=""><i class="fa fa-book"></i>
</button><input type="number" id="iId" min="1" name="id" required></span>
@ -55,7 +55,7 @@ $footerView->setResults(1);
</button><input type="number" id="iId" min="1" name="id" required></span>
<td><input type="datetime-local" id="iId" min="1" name="id" required>
<tr>
<td colspan="4"><input type="submit" value="<?= $this->getText('Search') ?>">
<td colspan="4"><input type="submit" value="<?= $this->getHtml('Search'); ?>">
</table>
</form>
</div>
@ -66,9 +66,9 @@ $footerView->setResults(1);
<div class="box w-100">
<div class="tabular-2">
<ul class="tab-links">
<li><label for="c-tab2-1"><?= $this->getText('List'); ?></label></li>
<li><label for="c-tab2-2"><?= $this->getText('Evaluation'); ?></label></li>
<li><label for="c-tab2-3"><?= $this->getText('Charts'); ?></label></li>
<li><label for="c-tab2-1"><?= $this->getHtml('List') ?></label></li>
<li><label for="c-tab2-2"><?= $this->getHtml('Evaluation') ?></label></li>
<li><label for="c-tab2-3"><?= $this->getHtml('Charts') ?></label></li>
</ul>
<div class="tab-content">
<input type="radio" id="c-tab2-1" name="tabular-2" checked>
@ -77,32 +77,32 @@ $footerView->setResults(1);
<div class="col-xs-12">
<section class="wf-100">
<table class="table red">
<caption><?= $this->getText('Entries') ?></caption>
<caption><?= $this->getHtml('Entries'); ?></caption>
<thead>
<tr>
<td><?= $this->getText('EntryDate'); ?>
<td><?= $this->getText('Receipt'); ?>
<td><?= $this->getText('Debit'); ?>
<td><?= $this->getText('Credit'); ?>
<td class="wf-100"><?= $this->getText('Text'); ?>
<td><?= $this->getText('Account'); ?>
<td><?= $this->getText('ContraAccount'); ?>
<td><?= $this->getText('CostCenter'); ?>
<td><?= $this->getText('CostObject'); ?>
<td><?= $this->getText('ReceiptDate'); ?>
<td><?= $this->getText('ExternalVoucher'); ?>
<td><?= $this->getText('Creator'); ?>
<td><?= $this->getText('Created'); ?>
<td><?= $this->getHtml('EntryDate') ?>
<td><?= $this->getHtml('Receipt') ?>
<td><?= $this->getHtml('Debit') ?>
<td><?= $this->getHtml('Credit') ?>
<td class="wf-100"><?= $this->getHtml('Text') ?>
<td><?= $this->getHtml('Account') ?>
<td><?= $this->getHtml('ContraAccount') ?>
<td><?= $this->getHtml('CostCenter') ?>
<td><?= $this->getHtml('CostObject') ?>
<td><?= $this->getHtml('ReceiptDate') ?>
<td><?= $this->getHtml('ExternalVoucher') ?>
<td><?= $this->getHtml('Creator') ?>
<td><?= $this->getHtml('Created') ?>
<tfoot>
<tr>
<td colspan="13"><?= $footerView->render(); ?>
<td colspan="13"><?= htmlspecialchars($footerView->render(), ENT_COMPAT, 'utf-8'); ?>
<tbody>
<?php $count = 0;
foreach ([] as $key => $value) : $count++; ?>
<?php endforeach; ?>
<?php if ($count === 0) : ?>
<tr>
<td colspan="13" class="empty"><?= $this->getText('Empty', 0, 0); ?>
<td colspan="13" class="empty"><?= $this->getHtml('Empty', 0, 0); ?>
<?php endif; ?>
</table>
</section>
@ -115,19 +115,19 @@ $footerView->setResults(1);
<div class="col-xs-4">
<section class="wf-100">
<table class="table red">
<caption><?= $this->getText('Accounts') ?></caption>
<caption><?= $this->getHtml('Accounts'); ?></caption>
<thead>
<tr>
<td><?= $this->getText('Account'); ?>
<td class="wf-100"><?= $this->getText('Name'); ?>
<td><?= $this->getText('Total'); ?>
<td><?= $this->getHtml('Account') ?>
<td class="wf-100"><?= $this->getHtml('Name') ?>
<td><?= $this->getHtml('Total') ?>
<tbody>
<?php $count = 0;
foreach ([] as $key => $value) : $count++; ?>
<?php endforeach; ?>
<?php if ($count === 0) : ?>
<tr>
<td colspan="13" class="empty"><?= $this->getText('Empty', 0, 0); ?>
<td colspan="13" class="empty"><?= $this->getHtml('Empty', 0, 0); ?>
<?php endif; ?>
</table>
</section>
@ -135,19 +135,19 @@ $footerView->setResults(1);
<div class="col-xs-4">
<section class="wf-100">
<table class="table green">
<caption><?= $this->getText('CostCenter') ?></caption>
<caption><?= $this->getHtml('CostCenter'); ?></caption>
<thead>
<tr>
<td><?= $this->getText('CostCenter'); ?>
<td class="wf-100"><?= $this->getText('Name'); ?>
<td><?= $this->getText('Total'); ?>
<td><?= $this->getHtml('CostCenter') ?>
<td class="wf-100"><?= $this->getHtml('Name') ?>
<td><?= $this->getHtml('Total') ?>
<tbody>
<?php $count = 0;
foreach ([] as $key => $value) : $count++; ?>
<?php endforeach; ?>
<?php if ($count === 0) : ?>
<tr>
<td colspan="13" class="empty"><?= $this->getText('Empty', 0, 0); ?>
<td colspan="13" class="empty"><?= $this->getHtml('Empty', 0, 0); ?>
<?php endif; ?>
</table>
</section>
@ -155,19 +155,19 @@ $footerView->setResults(1);
<div class="col-xs-4">
<section class="wf-100">
<table class="table blue">
<caption><?= $this->getText('CostObject') ?></caption>
<caption><?= $this->getHtml('CostObject'); ?></caption>
<thead>
<tr>
<td><?= $this->getText('Account'); ?>
<td class="wf-100"><?= $this->getText('Name'); ?>
<td><?= $this->getText('Total'); ?>
<td><?= $this->getHtml('Account') ?>
<td class="wf-100"><?= $this->getHtml('Name') ?>
<td><?= $this->getHtml('Total') ?>
<tbody>
<?php $count = 0;
foreach ([] as $key => $value) : $count++; ?>
<?php endforeach; ?>
<?php if ($count === 0) : ?>
<tr>
<td colspan="13" class="empty"><?= $this->getText('Empty', 0, 0); ?>
<td colspan="13" class="empty"><?= $this->getHtml('Empty', 0, 0); ?>
<?php endif; ?>
</table>
</section>

View File

@ -15,17 +15,17 @@
echo $this->getData('nav')->render(); ?>
<section class="box w-50">
<header><h1><?= $this->getText('GL'); ?></h1></header>
<header><h1><?= $this->getHtml('GL') ?></h1></header>
<div class="inner">
<form>
<table class="layout wf-100">
<tr><td><label for="iId"><?= $this->getText('ID', 0, 0); ?></label>
<tr><td><label for="iId"><?= $this->getHtml('ID', 0, 0); ?></label>
<tr><td><input type="text" id="iId" name="id">
<tr><td><label for="iName"><?= $this->getText('Name'); ?></label>
<tr><td><label for="iName"><?= $this->getHtml('Name') ?></label>
<tr><td><input type="text" id="iName" name="name">
<tr><td><label for="iParent"><?= $this->getText('Parent'); ?></label>
<tr><td><label for="iParent"><?= $this->getHtml('Parent') ?></label>
<tr><td><input type="text" id="iParent" name="parent">
<tr><td><input type="submit" value="<?= $this->getText('Create', 0, 0); ?>">
<tr><td><input type="submit" value="<?= $this->getHtml('Create', 0, 0); ?>">
</table>
</form>
</div>

View File

@ -29,25 +29,25 @@ echo $this->getData('nav')->render(); ?>
<div class="col-xs-12">
<div class="box wf-100">
<table class="table red">
<caption><?= $this->getText('GL'); ?></caption>
<caption><?= $this->getHtml('GL') ?></caption>
<thead>
<tr>
<td><?= $this->getText('ID', 0, 0); ?>
<td class="wf-100"><?= $this->getText('Name'); ?>
<td><?= $this->getHtml('ID', 0, 0); ?>
<td class="wf-100"><?= $this->getHtml('Name') ?>
<tfoot>
<tr><td colspan="5"><?= $footerView->render(); ?>
<tr><td colspan="5"><?= htmlspecialchars($footerView->render(), ENT_COMPAT, 'utf-8'); ?>
<tbody>
<?php $c = 0; foreach ([] as $key => $value) : $c++;
$url = \phpOMS\Uri\UriFactory::build('{/base}/{/lang}/backend/admin/group/settings?{?}&id=' . $value->getId()); ?>
<tr>
<td><a href="<?= $url; ?>"><?= $value->getId(); ?></a>
<td><a href="<?= $url; ?>"><?= $value->getName(); ?></a>
<td><a href="<?= $url; ?>"><?= htmlspecialchars($value->getId(), ENT_COMPAT, 'utf-8'); ?></a>
<td><a href="<?= $url; ?>"><?= htmlspecialchars($value->getName(), ENT_COMPAT, 'utf-8'); ?></a>
<td>
<td>
<td>
<?php endforeach; ?>
<?php if($c === 0) : ?>
<tr><td colspan="5" class="empty"><?= $this->getText('Empty', 0, 0); ?>
<tr><td colspan="5" class="empty"><?= $this->getHtml('Empty', 0, 0); ?>
<?php endif; ?>
</table>
</div>

View File

@ -27,25 +27,25 @@ echo $this->getData('nav')->render(); ?>
<div class="box w-100">
<table class="table red">
<caption><?= $this->getText('Journal'); ?></caption>
<caption><?= $this->getHtml('Journal') ?></caption>
<thead>
<tr>
<td><?= $this->getText('ID', 0, 0); ?>
<td class="wf-100"><?= $this->getText('Name'); ?>
<td><?= $this->getHtml('ID', 0, 0); ?>
<td class="wf-100"><?= $this->getHtml('Name') ?>
<tfoot>
<tr><td colspan="5"><?= $footerView->render(); ?>
<tr><td colspan="5"><?= htmlspecialchars($footerView->render(), ENT_COMPAT, 'utf-8'); ?>
<tbody>
<?php $c = 0; foreach ([] as $key => $value) : $c++;
$url = \phpOMS\Uri\UriFactory::build('{/base}/{/lang}/backend/admin/group/settings?{?}&id=' . $value->getId()); ?>
<tr>
<td><a href="<?= $url; ?>"><?= $value->getId(); ?></a>
<td><a href="<?= $url; ?>"><?= $value->getName(); ?></a>
<td><a href="<?= $url; ?>"><?= htmlspecialchars($value->getId(), ENT_COMPAT, 'utf-8'); ?></a>
<td><a href="<?= $url; ?>"><?= htmlspecialchars($value->getName(), ENT_COMPAT, 'utf-8'); ?></a>
<td>
<td>
<td>
<?php endforeach; ?>
<?php if($c === 0) : ?>
<tr><td colspan="5" class="empty"><?= $this->getText('Empty', 0, 0); ?>
<tr><td colspan="5" class="empty"><?= $this->getHtml('Empty', 0, 0); ?>
<?php endif; ?>
</table>
</div>

View File

@ -27,27 +27,27 @@ echo $this->getData('nav')->render(); ?>
<div class="box w-100">
<table class="table red">
<caption><?= $this->getText('BatchPostings'); ?></caption>
<caption><?= $this->getHtml('BatchPostings') ?></caption>
<thead>
<tr>
<td><?= $this->getText('ID', 0, 0); ?>
<td class="wf-100"><?= $this->getText('Name'); ?>
<td><?= $this->getText('Creator'); ?>
<td><?= $this->getText('Created'); ?>
<td><?= $this->getHtml('ID', 0, 0); ?>
<td class="wf-100"><?= $this->getHtml('Name') ?>
<td><?= $this->getHtml('Creator') ?>
<td><?= $this->getHtml('Created') ?>
<tfoot>
<tr><td colspan="5"><?= $footerView->render(); ?>
<tr><td colspan="5"><?= htmlspecialchars($footerView->render(), ENT_COMPAT, 'utf-8'); ?>
<tbody>
<?php $c = 0; foreach ([] as $key => $value) : $c++;
$url = \phpOMS\Uri\UriFactory::build('{/base}/{/lang}/backend/admin/group/settings?{?}&id=' . $value->getId()); ?>
<tr>
<td><a href="<?= $url; ?>"><?= $value->getId(); ?></a>
<td><a href="<?= $url; ?>"><?= $value->getName(); ?></a>
<td><a href="<?= $url; ?>"><?= htmlspecialchars($value->getId(), ENT_COMPAT, 'utf-8'); ?></a>
<td><a href="<?= $url; ?>"><?= htmlspecialchars($value->getName(), ENT_COMPAT, 'utf-8'); ?></a>
<td>
<td>
<td>
<?php endforeach; ?>
<?php if($c === 0) : ?>
<tr><td colspan="5" class="empty"><?= $this->getText('Empty', 0, 0); ?>
<tr><td colspan="5" class="empty"><?= $this->getHtml('Empty', 0, 0); ?>
<?php endif; ?>
</table>
</div>

View File

@ -18,19 +18,19 @@
echo $this->getData('nav')->render(); ?>
<section class="box w-50">
<header><h1><?= $this->getText('Stack'); ?></h1></header>
<header><h1><?= $this->getHtml('Stack') ?></h1></header>
<div class="inner">
<form>
<table class="layout wf-100">
<tr><td><label for="iName"><?= $this->getText('Name'); ?></label>
<tr><td><label for="iName"><?= $this->getHtml('Name') ?></label>
<tr><td><input id="iName" name="name" type="text">
<tr><td><label for="iType"><?= $this->getText('Type'); ?></label>
<tr><td><label for="iType"><?= $this->getHtml('Type') ?></label>
<tr><td><select id="iType" name="type">
<option value=""><?= $this->getText('TAccount'); ?>
<option value=""><?= $this->getText('Incoming'); ?>
<option value=""><?= $this->getText('Outgoing'); ?>
<option value=""><?= $this->getHtml('TAccount') ?>
<option value=""><?= $this->getHtml('Incoming') ?>
<option value=""><?= $this->getHtml('Outgoing') ?>
</select>
<tr><td><input name="submit" type="submit" value="<?= $this->getText('Create', 0, 0); ?>">
<tr><td><input name="submit" type="submit" value="<?= $this->getHtml('Create', 0, 0); ?>">
</table>
</form>
</div>

View File

@ -29,27 +29,27 @@ echo $this->getData('nav')->render(); ?>
<div class="col-xs-12">
<div class="box wf-100">
<table class="table red">
<caption><?= $this->getText('BatchPostings'); ?></caption>
<caption><?= $this->getHtml('BatchPostings') ?></caption>
<thead>
<tr>
<td><?= $this->getText('ID', 0, 0); ?>
<td class="wf-100"><?= $this->getText('Name'); ?>
<td><?= $this->getText('Creator'); ?>
<td><?= $this->getText('Created'); ?>
<td><?= $this->getHtml('ID', 0, 0); ?>
<td class="wf-100"><?= $this->getHtml('Name') ?>
<td><?= $this->getHtml('Creator') ?>
<td><?= $this->getHtml('Created') ?>
<tfoot>
<tr><td colspan="5"><?= $footerView->render(); ?>
<tr><td colspan="5"><?= htmlspecialchars($footerView->render(), ENT_COMPAT, 'utf-8'); ?>
<tbody>
<?php $c = 0; foreach ([] as $key => $value) : $c++;
$url = \phpOMS\Uri\UriFactory::build('{/base}/{/lang}/backend/admin/group/settings?{?}&id=' . $value->getId()); ?>
<tr>
<td><a href="<?= $url; ?>"><?= $value->getId(); ?></a>
<td><a href="<?= $url; ?>"><?= $value->getName(); ?></a>
<td><a href="<?= $url; ?>"><?= htmlspecialchars($value->getId(), ENT_COMPAT, 'utf-8'); ?></a>
<td><a href="<?= $url; ?>"><?= htmlspecialchars($value->getName(), ENT_COMPAT, 'utf-8'); ?></a>
<td>
<td>
<td>
<?php endforeach; ?>
<?php if($c === 0) : ?>
<tr><td colspan="5" class="empty"><?= $this->getText('Empty', 0, 0); ?>
<tr><td colspan="5" class="empty"><?= $this->getHtml('Empty', 0, 0); ?>
<?php endif; ?>
</table>
</div>

View File

@ -27,28 +27,28 @@ echo $this->getData('nav')->render(); ?>
<div class="box w-100">
<table class="table red">
<caption><?= $this->getText('BatchPostings'); ?></caption>
<caption><?= $this->getHtml('BatchPostings') ?></caption>
<thead>
<tr>
<td><?= $this->getText('ID', 0, 0); ?>
<td><?= $this->getText('Due'); ?>
<td class="wf-100"><?= $this->getText('Name'); ?>
<td><?= $this->getText('Creator'); ?>
<td><?= $this->getText('Created'); ?>
<td><?= $this->getHtml('ID', 0, 0); ?>
<td><?= $this->getHtml('Due') ?>
<td class="wf-100"><?= $this->getHtml('Name') ?>
<td><?= $this->getHtml('Creator') ?>
<td><?= $this->getHtml('Created') ?>
<tfoot>
<tr><td colspan="5"><?= $footerView->render(); ?>
<tr><td colspan="5"><?= htmlspecialchars($footerView->render(), ENT_COMPAT, 'utf-8'); ?>
<tbody>
<?php $c = 0; foreach ([] as $key => $value) : $c++;
$url = \phpOMS\Uri\UriFactory::build('{/base}/{/lang}/backend/admin/group/settings?{?}&id=' . $value->getId()); ?>
<tr>
<td><a href="<?= $url; ?>"><?= $value->getId(); ?></a>
<td><a href="<?= $url; ?>"><?= $value->getName(); ?></a>
<td><a href="<?= $url; ?>"><?= htmlspecialchars($value->getId(), ENT_COMPAT, 'utf-8'); ?></a>
<td><a href="<?= $url; ?>"><?= htmlspecialchars($value->getName(), ENT_COMPAT, 'utf-8'); ?></a>
<td>
<td>
<td>
<?php endforeach; ?>
<?php if($c === 0) : ?>
<tr><td colspan="5" class="empty"><?= $this->getText('Empty', 0, 0); ?>
<tr><td colspan="5" class="empty"><?= $this->getHtml('Empty', 0, 0); ?>
<?php endif; ?>
</table>
</div>