monitoring: Escape hostname, service name and event message in the eventhistory overview

This commit is contained in:
Eric Lippmann 2015-01-21 10:03:14 +01:00
parent e55cf73f34
commit 9018b36d7a

View File

@ -110,21 +110,21 @@ use Icinga\Module\Monitoring\Object\Service;
'host' => $event->host, 'host' => $event->host,
'service' => $event->service 'service' => $event->service
)); ?>"> )); ?>">
<?= $event->service; ?> <?= $this->escape($event->service) ?>
</a> </a>
<small> <small>
<?= $this->translate('on') . ' ' . $event->host; ?> <?= $this->translate('on') . ' ' . $this->escape($event->host) ?>
</small> </small>
<?php else: ?> <?php else: ?>
<a href="<?= $this->href('monitoring/show/host', array( <a href="<?= $this->href('monitoring/show/host', array(
'host' => $event->host 'host' => $event->host
)); ?>"> )); ?>">
<?= $event->host; ?> <?= $this->escape($event->host) ?>
</a> </a>
<?php endif ?> <?php endif ?>
<br> <br>
<div> <div>
<?= $this->icon($icon, $title); ?> <?= empty($msg) ? '' : $msg; ?> <?= $this->icon($icon, $title); ?> <?= empty($msg) ? '' : $this->escape($msg) ?>
</div> </div>
</td> </td>
</tr> </tr>