Add html escaping

This commit is contained in:
Dennis Eichhorn 2017-07-24 20:48:22 +02:00
parent b31639e69c
commit f489175e44
3 changed files with 39 additions and 39 deletions

View File

@ -29,28 +29,28 @@ echo $this->getData('nav')->render(); ?>
<div class="col-xs-12">
<div class="box wf-100">
<table class="table red">
<caption><?= $this->getText('Checklists'); ?></caption>
<caption><?= $this->getHtml('Checklists') ?></caption>
<thead>
<tr>
<td><?= $this->getText('ID', 0, 0); ?>
<td><?= $this->getText('Status'); ?>
<td class="wf-100"><?= $this->getText('Name'); ?>
<td><?= $this->getText('Creator'); ?>
<td><?= $this->getText('Created'); ?>
<td><?= $this->getHtml('ID', 0, 0); ?>
<td><?= $this->getHtml('Status') ?>
<td class="wf-100"><?= $this->getHtml('Name') ?>
<td><?= $this->getHtml('Creator') ?>
<td><?= $this->getHtml('Created') ?>
<tfoot>
<tr><td colspan="5"><?= $footerView->render(); ?>
<tr><td colspan="5"><?= htmlspecialchars($footerView->render(), ENT_COMPAT, 'utf-8'); ?>
<tbody>
<?php $c = 0; foreach ([] as $key => $value) : $c++;
$url = \phpOMS\Uri\UriFactory::build('{/base}/{/lang}/backend/checklist/single?{?}&id=' . $value->getId()); ?>
<tr>
<td><a href="<?= $url; ?>"><?= $value->getId(); ?></a>
<td><a href="<?= $url; ?>"><?= $value->getName(); ?></a>
<td><a href="<?= $url; ?>"><?= $value->getParent(); ?></a>
<td><a href="<?= $url; ?>"><?= $value->getUnit(); ?></a>
<td><a href="<?= $url; ?>"><?= htmlspecialchars($value->getId(), ENT_COMPAT, 'utf-8'); ?></a>
<td><a href="<?= $url; ?>"><?= htmlspecialchars($value->getName(), ENT_COMPAT, 'utf-8'); ?></a>
<td><a href="<?= $url; ?>"><?= htmlspecialchars($value->getParent(), ENT_COMPAT, 'utf-8'); ?></a>
<td><a href="<?= $url; ?>"><?= htmlspecialchars($value->getUnit(), ENT_COMPAT, 'utf-8'); ?></a>
<?php endforeach; ?>
<?php if($c === 0) : ?>
<tr>
<td colspan="5" class="empty"><?= $this->getText('Empty', 0, 0); ?>
<td colspan="5" class="empty"><?= $this->getHtml('Empty', 0, 0); ?>
<?php endif; ?>
</table>
</div>

View File

@ -21,21 +21,21 @@ echo $this->getData('nav')->render(); ?>
<div class="row">
<div class="col-xs-12 col-md-6">
<section class="box wf-100">
<header><h1><?= $this->getText('General'); ?></h1></header>
<header><h1><?= $this->getHtml('General') ?></h1></header>
<div class="inner">
<form id="fChecklist">
<table class="layout wf-100">
<tr><td><label for="iName"><?= $this->getText('Name'); ?></label><td>
<tr><td><label for="iName"><?= $this->getHtml('Name') ?></label><td>
<tr><td><input type="text" id="iName" name="name" required><td>
<tr><td><label for="iDescription"><?= $this->getText('Description'); ?></label><td>
<tr><td><label for="iDescription"><?= $this->getHtml('Description') ?></label><td>
<tr><td><textarea id="iDescription" name="description"></textarea><td>
<tr><td><label for="iPermission"><?= $this->getText('Permissions'); ?></label><td>
<tr><td><label for="iPermission"><?= $this->getHtml('Permissions') ?></label><td>
<tr><td><span class="input"><button type="button" formaction=""><i class="fa fa-book"></i></button>
<input type="text" id="iPermission" name="permission"></span>
<td><button><?= $this->getText('Add', 0, 0); ?></button>
<tr><td><label for="iFiles"><?= $this->getText('Files'); ?></label><td>
<td><button><?= $this->getHtml('Add', 0, 0); ?></button>
<tr><td><label for="iFiles"><?= $this->getHtml('Files') ?></label><td>
<tr><td><input id="iFiles" name="files" type="file" multiple><td>
<tr><td><input type="submit" value="<?= $this->getText('Create', 0, 0); ?>"><td>
<tr><td><input type="submit" value="<?= $this->getHtml('Create', 0, 0); ?>"><td>
</table>
</form>
</div>
@ -44,23 +44,23 @@ echo $this->getData('nav')->render(); ?>
<div class="col-xs-12 col-md-6">
<section class="box wf-100">
<header><h1><?= $this->getText('Tasks'); ?></h1></header>
<header><h1><?= $this->getHtml('Tasks') ?></h1></header>
<div class="inner">
<form>
<table class="layout wf-100">
<tr><td><label for="iETitle"><?= $this->getText('Title'); ?></label><td>
<tr><td><label for="iETitle"><?= $this->getHtml('Title') ?></label><td>
<tr><td><input type="text" id="iETitle" name="eTitle" required><td>
<tr><td><label for="iEDescription"><?= $this->getText('Description'); ?></label><td>
<tr><td><label for="iEDescription"><?= $this->getHtml('Description') ?></label><td>
<tr><td><textarea id="iEDescription" name="eDescription"></textarea><td>
<tr><td><label for="iETime"><?= $this->getText('TimeInMinutes'); ?></label><td>
<tr><td><label for="iETime"><?= $this->getHtml('TimeInMinutes') ?></label><td>
<tr><td><input type="number" min="0" step="1" id="iETime" name="eTime" value="0"><td>
<tr><td><label for="iEPermission"><?= $this->getText('Permissions'); ?></label><td>
<tr><td><label for="iEPermission"><?= $this->getHtml('Permissions') ?></label><td>
<tr><td><span class="input"><button type="button" formaction=""><i class="fa fa-book"></i></button>
<input type="text" id="iEPermission" name="ePermission"></span>
<td><button data-action=""><?= $this->getText('Add', 0, 0); ?></button>
<tr><td><label for="iEFiles"><?= $this->getText('Files'); ?></label><td>
<td><button data-action=""><?= $this->getHtml('Add', 0, 0); ?></button>
<tr><td><label for="iEFiles"><?= $this->getHtml('Files') ?></label><td>
<tr><td><input id="iEFiles" name="eFiles" type="file" multiple><td>
<tr><td><input type="submit" value="<?= $this->getText('Add', 0, 0); ?>" data-action=""><td>
<tr><td><input type="submit" value="<?= $this->getHtml('Add', 0, 0); ?>" data-action=""><td>
</table>
</form>
</div>

View File

@ -29,28 +29,28 @@ echo $this->getData('nav')->render(); ?>
<div class="col-xs-12">
<div class="box wf-100">
<table class="table red">
<caption><?= $this->getText('Templates'); ?></caption>
<caption><?= $this->getHtml('Templates') ?></caption>
<thead>
<tr>
<td><?= $this->getText('ID', 0, 0); ?>
<td><?= $this->getText('Status'); ?>
<td class="wf-100"><?= $this->getText('Name'); ?>
<td><?= $this->getText('Creator'); ?>
<td><?= $this->getText('Created'); ?>
<td><?= $this->getHtml('ID', 0, 0); ?>
<td><?= $this->getHtml('Status') ?>
<td class="wf-100"><?= $this->getHtml('Name') ?>
<td><?= $this->getHtml('Creator') ?>
<td><?= $this->getHtml('Created') ?>
<tfoot>
<tr><td colspan="5"><?= $footerView->render(); ?>
<tr><td colspan="5"><?= htmlspecialchars($footerView->render(), ENT_COMPAT, 'utf-8'); ?>
<tbody>
<?php $c = 0; foreach ([] as $key => $value) : $c++;
$url = \phpOMS\Uri\UriFactory::build('{/base}/{/lang}/backend/checklist/single?{?}&id=' . $value->getId()); ?>
<tr>
<td><a href="<?= $url; ?>"><?= $value->getId(); ?></a>
<td><a href="<?= $url; ?>"><?= $value->getName(); ?></a>
<td><a href="<?= $url; ?>"><?= $value->getParent(); ?></a>
<td><a href="<?= $url; ?>"><?= $value->getUnit(); ?></a>
<td><a href="<?= $url; ?>"><?= htmlspecialchars($value->getId(), ENT_COMPAT, 'utf-8'); ?></a>
<td><a href="<?= $url; ?>"><?= htmlspecialchars($value->getName(), ENT_COMPAT, 'utf-8'); ?></a>
<td><a href="<?= $url; ?>"><?= htmlspecialchars($value->getParent(), ENT_COMPAT, 'utf-8'); ?></a>
<td><a href="<?= $url; ?>"><?= htmlspecialchars($value->getUnit(), ENT_COMPAT, 'utf-8'); ?></a>
<?php endforeach; ?>
<?php if($c === 0) : ?>
<tr>
<td colspan="5" class="empty"><?= $this->getText('Empty', 0, 0); ?>
<td colspan="5" class="empty"><?= $this->getHtml('Empty', 0, 0); ?>
<?php endif; ?>
</table>
</div>