monitoring: Escape host and service name, author and comment in the downtimes overview

This commit is contained in:
Eric Lippmann 2015-01-21 10:47:20 +01:00
parent e881a0de33
commit 2fdeabd398

View File

@ -57,20 +57,20 @@ use Icinga\Module\Monitoring\Object\Service;
'host' => $downtime->host, 'host' => $downtime->host,
'service' => $downtime->service 'service' => $downtime->service
)); ?>"> )); ?>">
<?= $downtime->service; ?> <?= $this->escape($downtime->service) ?>
</a> </a>
<small> <small>
<?= $this->translate('on'); ?> <?= $downtime->host; ?> <?= $this->translate('on'); ?> <?= $this->escape($downtime->host) ?>
</small> </small>
<?php else: ?> <?php else: ?>
<?= $this->icon('host'); ?> <a href="<?= $this->href('monitoring/host/show', array( <?= $this->icon('host'); ?> <a href="<?= $this->href('monitoring/host/show', array(
'host' => $downtime->host 'host' => $downtime->host
)); ?>"> )); ?>">
<?= $downtime->host; ?> <?= $this->escape($downtime->host) ?>
</a> </a>
<?php endif ?> <?php endif ?>
<br> <br>
<?= $this->icon('comment'); ?> [<?= $downtime->author; ?>] <?= $downtime->comment; ?> <?= $this->icon('comment') ?> [<?= $this->escape($downtime->author) ?>] <?= $this->escape($downtime->comment) ?>
<br> <br>
<small> <small>
<?php if ($downtime->is_flexible): ?> <?php if ($downtime->is_flexible): ?>