Escape missing variables

refs #8903
This commit is contained in:
Matthias Jentsch 2015-05-04 16:01:14 +02:00
parent e6740c5093
commit 5477a2f18e
2 changed files with 2 additions and 2 deletions

View File

@ -64,7 +64,7 @@ if (count($comments) === 0) {
<?php endif ?> <?php endif ?>
<br> <br>
<?= $this->icon('comment', $this->translate('Comment')); ?> <?= isset($comment->author) <?= $this->icon('comment', $this->translate('Comment')); ?> <?= isset($comment->author)
? '[' . $comment->author . '] ' ? '[' . $this->escape($comment->author) . '] '
: ''; : '';
?><?= $this->escape($comment->comment); ?> ?><?= $this->escape($comment->comment); ?>
<br> <br>

View File

@ -13,6 +13,6 @@
<br> <br>
<?= $this->icon('comment', $this->translate('Comment')); ?> <?= isset($comment->author) <?= $this->icon('comment', $this->translate('Comment')); ?> <?= isset($comment->author)
? '[' . $comment->author . '] ' ? '[' . $this->escape($comment->author) . '] '
: ''; : '';
?><?= $this->escape($comment->comment); ?> ?><?= $this->escape($comment->comment); ?>