Add html escaping

This commit is contained in:
Dennis Eichhorn 2017-07-24 20:48:22 +02:00
parent 22e21d6e7e
commit 47658bd7d6
5 changed files with 11 additions and 11 deletions

View File

@ -19,7 +19,7 @@
/* Looping through all links */
if (isset($this->nav[\Modules\Navigation\Models\NavigationType::CONTENT_SIDE])) {
echo '<div class="b b-5 c3-2 c3" id="i3-2-5">'
. '<h1>' . $this->getText('Navigation')
. '<h1>' . $this->getHtml('Navigation')
. '<i class="fa fa-minus min"></i><i class="fa fa-plus max vh"></i>'
. '</h1>'
. '<div class="bc-1">'
@ -30,7 +30,7 @@ if (isset($this->nav[\Modules\Navigation\Models\NavigationType::CONTENT_SIDE]))
/** @var array $data */
if ($link['nav_parent'] == $data[1]) {
echo '<li><a href="' . \phpOMS\Uri\UriFactory::build($link['nav_uri']) . '">'
. $this->getText(5, 'Backend', $link['nav_name']) . '</a>';
. $this->getHtml(5, 'Backend', $link['nav_name']) . '</a>';
}
}
}

View File

@ -22,7 +22,7 @@ if (isset($this->nav[\Modules\Navigation\Models\NavigationType::CONTENT])) {
foreach ($parent as $link) {
if ($link['nav_parent'] == $this->parent) {
echo '<li><a href="' . \phpOMS\Uri\UriFactory::build($link['nav_uri']) . '">'
. $this->getText($link['nav_name']) . '</a>';
. $this->getHtml($link['nav_name']) . '</a>';
}
}
}

View File

@ -18,18 +18,18 @@
if (isset($this->nav[\Modules\Navigation\Models\NavigationType::SIDE])) : ?>
<ul id="nav-side" class="nav" role="navigation">
<?php foreach ($this->nav[\Modules\Navigation\Models\NavigationType::SIDE][\Modules\Navigation\Models\LinkType::CATEGORY] as $key => $parent) : ?>
<li><input id="nav-<?= $parent['nav_name']; ?>" type="checkbox">
<li><input id="nav-<?= htmlspecialchars($parent['nav_name'], ENT_COMPAT, 'utf-8'); ?>" type="checkbox">
<ul>
<li>
<?php if (isset($parent['nav_icon'])) : ?>
<span class="centerText" style="width: 20px; display: inline-block;"><i class="<?= $parent['nav_icon']; ?>"></i></span>
<span class="centerText" style="width: 20px; display: inline-block;"><i class="<?= htmlspecialchars($parent['nav_icon'], ENT_COMPAT, 'utf-8'); ?>"></i></span>
<?php endif; ?>
<?= $this->getText($parent['nav_name']); ?><label for="nav-<?= $parent['nav_name']; ?>"><i class="fa fa-chevron-down min"></i>
<?= $this->getHtml($parent['nav_name']) ?><label for="nav-<?= htmlspecialchars($parent['nav_name'], ENT_COMPAT, 'utf-8'); ?>"><i class="fa fa-chevron-down min"></i>
<i class="fa fa-chevron-up max"></i></label>
<?php foreach ($this->nav[\Modules\Navigation\Models\NavigationType::SIDE][\Modules\Navigation\Models\LinkType::LINK] as $key2 => $link) :
if ($link['nav_parent'] === $parent['nav_id']) : ?>
<li>
<a href="<?= \phpOMS\Uri\UriFactory::build($link['nav_uri']); ?>"><?= $this->getText($link['nav_name']); ?></a>
<a href="<?= \phpOMS\Uri\UriFactory::build($link['nav_uri']); ?>"><?= $this->getHtml($link['nav_name']) ?></a>
<?php endif;
endforeach; ?>
</ul>

View File

@ -22,8 +22,8 @@ if (isset($this->nav[\Modules\Navigation\Models\NavigationType::CONTENT])) :
<section class="box w-33 floatLeft">
<div class="inner centerText">
<a href="<?= \phpOMS\Uri\UriFactory::build($link['nav_uri']); ?>">
<p><i class="fa-5x <?= $link['nav_icon']; ?>"></i></p>
<p><?= $this->getText($link['nav_name']) ?></p>
<p><i class="fa-5x <?= htmlspecialchars($link['nav_icon'], ENT_COMPAT, 'utf-8'); ?>"></i></p>
<p><?= $this->getHtml($link['nav_name']); ?></p>
</a>
</div>
</section>

View File

@ -24,10 +24,10 @@ if (isset($this->nav[\Modules\Navigation\Models\NavigationType::TOP])): ?>
<li><a href="<?= \phpOMS\Uri\UriFactory::build($link['nav_uri']); ?>">
<?php if (isset($link['nav_icon'])) : ?>
<i class="<?= $link['nav_icon']; ?> infoIcon"><?php if(isset($unread[$link['nav_from']]) && $unread[$link['nav_from']] > 0) : ?><span class="badge"><?= $unread[$link['nav_from']]; ?></span><?php endif; ?></i>
<i class="<?= htmlspecialchars($link['nav_icon'], ENT_COMPAT, 'utf-8'); ?> infoIcon"><?php if(isset($unread[$link['nav_from']]) && $unread[$link['nav_from']] > 0) : ?><span class="badge"><?= htmlspecialchars($unread[$link['nav_from']], ENT_COMPAT, 'utf-8'); ?></span><?php endif; ?></i>
<?php endif; ?>
<?= $this->getText($link['nav_name']); ?></a>
<?= $this->getHtml($link['nav_name']) ?></a>
<?php endforeach;
endforeach; ?>