monitoring: Escape host and service name, author and comment in the downtimes overview

This commit is contained in:
Eric Lippmann 2015-01-21 10:47:20 +01:00
parent e881a0de33
commit 2fdeabd398

View File

@ -57,20 +57,20 @@ use Icinga\Module\Monitoring\Object\Service;
'host' => $downtime->host,
'service' => $downtime->service
)); ?>">
<?= $downtime->service; ?>
<?= $this->escape($downtime->service) ?>
</a>
<small>
<?= $this->translate('on'); ?> <?= $downtime->host; ?>
<?= $this->translate('on'); ?> <?= $this->escape($downtime->host) ?>
</small>
<?php else: ?>
<?= $this->icon('host'); ?> <a href="<?= $this->href('monitoring/host/show', array(
'host' => $downtime->host
)); ?>">
<?= $downtime->host; ?>
<?= $this->escape($downtime->host) ?>
</a>
<?php endif ?>
<br>
<?= $this->icon('comment'); ?> [<?= $downtime->author; ?>] <?= $downtime->comment; ?>
<?= $this->icon('comment') ?> [<?= $this->escape($downtime->author) ?>] <?= $this->escape($downtime->comment) ?>
<br>
<small>
<?php if ($downtime->is_flexible): ?>