diff --git a/Theme/Backend/workflow-dashboard.tpl.php b/Theme/Backend/workflow-dashboard.tpl.php
index 342ed5b..48e8aec 100644
--- a/Theme/Backend/workflow-dashboard.tpl.php
+++ b/Theme/Backend/workflow-dashboard.tpl.php
@@ -21,13 +21,13 @@ echo $this->getData('nav')->render(); ?>
- = $this->getText('Workflow'); ?>
+ = $this->getHtml('Workflow') ?>
- | = $this->getText('Status'); ?>
- | = $this->getText('Next'); ?>
- | = $this->getText('Title'); ?>
- | = $this->getText('Creator'); ?>
- | = $this->getText('Created'); ?>
+ | = $this->getHtml('Status') ?>
+ | = $this->getHtml('Next') ?>
+ | = $this->getHtml('Title') ?>
+ | = $this->getHtml('Creator') ?>
+ | = $this->getHtml('Created') ?>
|
$workflow) : $c++;
@@ -39,13 +39,13 @@ echo $this->getData('nav')->render(); ?>
elseif($workflow->getStatus() === \Modules\Workflow\Models\WorkflowStatus::CANCELED) { $color = 'red'; }
elseif($workflow->getStatus() === \Modules\Workflow\Models\WorkflowStatus::SUSPENDED) { $color = 'yellow'; } ;?>
- | = $this->getText('S' . $workflow->getStatus()); ?>
- | = $workflow->getDue()->format('Y-m-d H:i'); ?>
- | = $workflow->getTitle(); ?>
- | = $workflow->getCreatedBy(); ?>
- | = $workflow->getCreatedAt()->format('Y-m-d H:i'); ?>
+ | = $this->getHtml('S' . $workflow->getStatus()) ?>
+ | = htmlspecialchars($workflow->getDue()->format('Y-m-d H:i'), ENT_COMPAT, 'utf-8'); ?>
+ | = htmlspecialchars($workflow->getTitle(), ENT_COMPAT, 'utf-8'); ?>
+ | = htmlspecialchars($workflow->getCreatedBy(), ENT_COMPAT, 'utf-8'); ?>
+ | = htmlspecialchars($workflow->getCreatedAt()->format('Y-m-d H:i'), ENT_COMPAT, 'utf-8'); ?>
- |
| = $this->getText('Empty', 0, 0); ?>
+ |
| = $this->getHtml('Empty', 0, 0); ?>
|
\ No newline at end of file
diff --git a/Theme/Backend/workflow-single.tpl.php b/Theme/Backend/workflow-single.tpl.php
index 8089c80..91f44b0 100644
--- a/Theme/Backend/workflow-single.tpl.php
+++ b/Theme/Backend/workflow-single.tpl.php
@@ -23,15 +23,15 @@ $cElements = count($elements);
echo $this->getData('nav')->render(); ?>
-
+ = htmlspecialchars($task->getTitle(), ENT_COMPAT, 'utf-8'); ?>
-
Due = $task->getDue()->format('Y-m-d H:i'); ?>
-
Created = $task->getCreatedAt()->format('Y-m-d H:i'); ?>
+
Due = htmlspecialchars($task->getDue()->format('Y-m-d H:i'), ENT_COMPAT, 'utf-8'); ?>
+
Created = htmlspecialchars($task->getCreatedAt()->format('Y-m-d H:i'), ENT_COMPAT, 'utf-8'); ?>
- = $task->getDescription(); ?>
+ = htmlspecialchars($task->getDescription(), ENT_COMPAT, 'utf-8'); ?>
-
Created = $task->getCreatedBy(); ?>
-
Status = $task->getStatus(); ?>
+
Created = htmlspecialchars($task->getCreatedBy(), ENT_COMPAT, 'utf-8'); ?>
+
Status = htmlspecialchars($task->getStatus(), ENT_COMPAT, 'utf-8'); ?>
@@ -43,14 +43,14 @@ foreach ($elements as $key => $element) : $c++;
elseif($element->getStatus() === \Modules\Tasks\Models\TaskStatus::CANCELED) { $color = 'red'; }
elseif($element->getStatus() === \Modules\Tasks\Models\TaskStatus::SUSPENDED) { $color = 'yellow'; } ?>
- = $this->getText('S' . $element->getStatus()); ?>
- = $element->getCreatedBy(); ?> - = $element->getCreatedAt()->format('Y-m-d H:i'); ?>
+ = $this->getHtml('S' . $element->getStatus()) ?>
+ = htmlspecialchars($element->getCreatedBy(), ENT_COMPAT, 'utf-8'); ?> - = htmlspecialchars($element->getCreatedAt()->format('Y-m-d H:i'), ENT_COMPAT, 'utf-8'); ?>
getDescription() !== '') : ?>
- = $element->getDescription(); ?>
+ = htmlspecialchars($element->getDescription(), ENT_COMPAT, 'utf-8'); ?>
@@ -60,10 +60,10 @@ foreach ($elements as $key => $element) : $c++;
$element->getStatus() !== \Modules\Tasks\Models\TaskStatus::DONE ||
$element->getStatus() !== \Modules\Tasks\Models\TaskStatus::SUSPENDED || $c != $cElements
) : ?>
-
Due = $element->getDue()->format('Y-m-d H:i'); ?>
+
Due = htmlspecialchars($element->getDue()->format('Y-m-d H:i'), ENT_COMPAT, 'utf-8'); ?>
getForwarded() !== 0) : ?>
-
Forwarded = $element->getForwarded(); ?>
+
Forwarded = htmlspecialchars($element->getForwarded(), ENT_COMPAT, 'utf-8'); ?>
@@ -72,17 +72,17 @@ foreach ($elements as $key => $element) : $c++;