tyler.durden
/
icingaweb2
mirror of https://github.com/Icinga/icingaweb2.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

monitoring: Escape hostname, service name and event message in the eventhistory overview

This commit is contained in:
Eric Lippmann 2015-01-21 10:03:14 +01:00
parent e55cf73f34
commit 9018b36d7a
1 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
modules/monitoring/application/views/scripts/list/eventhistory.phtml
View File

@ -110,21 +110,21 @@ use Icinga\Module\Monitoring\Object\Service;
'host' => $event->host,
'service' => $event->service
)); ?>">
<?= $event->service; ?>
<?= $this->escape($event->service) ?>
</a>
<small>
<?= $this->translate('on') . ' ' . $event->host; ?>
<?= $this->translate('on') . ' ' . $this->escape($event->host) ?>
</small>
<?php else: ?>
<a href="<?= $this->href('monitoring/show/host', array(
'host' => $event->host
)); ?>">
<?= $event->host; ?>
<?= $this->escape($event->host) ?>
</a>
<?php endif ?>
<br>
<div>
<?= $this->icon($icon, $title); ?> <?= empty($msg) ? '' : $msg; ?>
<?= $this->icon($icon, $title); ?> <?= empty($msg) ? '' : $this->escape($msg) ?>
</div>
</td>
</tr>