diff --git a/modules/monitoring/application/views/scripts/downtime/show.phtml b/modules/monitoring/application/views/scripts/downtime/show.phtml index c584540fc..b10ae9587 100644 --- a/modules/monitoring/application/views/scripts/downtime/show.phtml +++ b/modules/monitoring/application/views/scripts/downtime/show.phtml @@ -45,7 +45,7 @@ translate('Comment') ?> - nl2br($this->escape($this->downtime->comment)) ?> + nl2br($this->escapeComment($this->downtime->comment)) ?> diff --git a/modules/monitoring/application/views/scripts/partials/comment/comment-detail.phtml b/modules/monitoring/application/views/scripts/partials/comment/comment-detail.phtml index 433b60412..0fb72c38d 100644 --- a/modules/monitoring/application/views/scripts/partials/comment/comment-detail.phtml +++ b/modules/monitoring/application/views/scripts/partials/comment/comment-detail.phtml @@ -56,5 +56,5 @@

- nl2br($this->escape($comment->comment)) ?> + nl2br($this->escapeComment($comment->comment)) ?>

diff --git a/modules/monitoring/application/views/scripts/partials/downtime/downtime-header.phtml b/modules/monitoring/application/views/scripts/partials/downtime/downtime-header.phtml index cf2cdf651..96130db7a 100644 --- a/modules/monitoring/application/views/scripts/partials/downtime/downtime-header.phtml +++ b/modules/monitoring/application/views/scripts/partials/downtime/downtime-header.phtml @@ -67,6 +67,6 @@

- nl2br($this->escape($downtime->comment)) ?> + nl2br($this->escapeComment($downtime->comment)) ?>

diff --git a/modules/monitoring/application/views/scripts/partials/event-history.phtml b/modules/monitoring/application/views/scripts/partials/event-history.phtml index e7ae0e034..7a0cee293 100644 --- a/modules/monitoring/application/views/scripts/partials/event-history.phtml +++ b/modules/monitoring/application/views/scripts/partials/event-history.phtml @@ -147,7 +147,9 @@ $history->limit($limit * $page); icon($icon, null, $iconCssClass ? array('class' => $iconCssClass) : array()); } ?> - createTicketLinks($this->escape($msg)), false) ?> + nl2br($this->createTicketLinks($this->escapeComment($msg))) + // TODO(ak): this allows only a[href] in messages, but plugin output allows more + ?>

diff --git a/modules/monitoring/application/views/scripts/show/components/acknowledgement.phtml b/modules/monitoring/application/views/scripts/show/components/acknowledgement.phtml index 289405c5b..568dc9062 100644 --- a/modules/monitoring/application/views/scripts/show/components/acknowledgement.phtml +++ b/modules/monitoring/application/views/scripts/show/components/acknowledgement.phtml @@ -44,7 +44,7 @@ $acknowledgement = $object->acknowledgement; } ?>
- nl2br($this->createTicketLinks($this->escape($acknowledgement->getComment()))) ?> + nl2br($this->createTicketLinks($this->escapeComment($acknowledgement->getComment()))) ?>
diff --git a/modules/monitoring/application/views/scripts/show/components/comments.phtml b/modules/monitoring/application/views/scripts/show/components/comments.phtml index 34b72c589..671c363d1 100644 --- a/modules/monitoring/application/views/scripts/show/components/comments.phtml +++ b/modules/monitoring/application/views/scripts/show/components/comments.phtml @@ -67,7 +67,7 @@ if (empty($object->comments) && ! $addLink) { } ?>
- nl2br($this->createTicketLinks($this->escape($comment->comment))) ?> + nl2br($this->createTicketLinks($this->escapeComment($comment->comment))) ?>
diff --git a/modules/monitoring/application/views/scripts/show/components/downtime.phtml b/modules/monitoring/application/views/scripts/show/components/downtime.phtml index 7da27f2bf..5655da4c4 100644 --- a/modules/monitoring/application/views/scripts/show/components/downtime.phtml +++ b/modules/monitoring/application/views/scripts/show/components/downtime.phtml @@ -96,7 +96,7 @@ if (empty($object->comments) && ! $addLink) { } ?>
- nl2br($this->createTicketLinks($this->escape($downtime->comment))) ?> + nl2br($this->createTicketLinks($this->escapeComment($downtime->comment))) ?>