diff --git a/modules/monitoring/application/views/scripts/downtime/show.phtml b/modules/monitoring/application/views/scripts/downtime/show.phtml index c584540fc..b10ae9587 100644 --- a/modules/monitoring/application/views/scripts/downtime/show.phtml +++ b/modules/monitoring/application/views/scripts/downtime/show.phtml @@ -45,7 +45,7 @@
- = $this->nl2br($this->escape($comment->comment)) ?> + = $this->nl2br($this->escapeComment($comment->comment)) ?>
diff --git a/modules/monitoring/application/views/scripts/partials/downtime/downtime-header.phtml b/modules/monitoring/application/views/scripts/partials/downtime/downtime-header.phtml index cf2cdf651..96130db7a 100644 --- a/modules/monitoring/application/views/scripts/partials/downtime/downtime-header.phtml +++ b/modules/monitoring/application/views/scripts/partials/downtime/downtime-header.phtml @@ -67,6 +67,6 @@- = $this->nl2br($this->escape($downtime->comment)) ?> + = $this->nl2br($this->escapeComment($downtime->comment)) ?>
diff --git a/modules/monitoring/application/views/scripts/partials/event-history.phtml b/modules/monitoring/application/views/scripts/partials/event-history.phtml index e7ae0e034..7a0cee293 100644 --- a/modules/monitoring/application/views/scripts/partials/event-history.phtml +++ b/modules/monitoring/application/views/scripts/partials/event-history.phtml @@ -147,7 +147,9 @@ $history->limit($limit * $page); icon($icon, null, $iconCssClass ? array('class' => $iconCssClass) : array()); } ?> - = nl2br($this->createTicketLinks($this->escape($msg)), false) ?> + = $this->nl2br($this->createTicketLinks($this->escapeComment($msg))) + // TODO(ak): this allows only a[href] in messages, but plugin output allows more + ?> diff --git a/modules/monitoring/application/views/scripts/show/components/acknowledgement.phtml b/modules/monitoring/application/views/scripts/show/components/acknowledgement.phtml index 289405c5b..568dc9062 100644 --- a/modules/monitoring/application/views/scripts/show/components/acknowledgement.phtml +++ b/modules/monitoring/application/views/scripts/show/components/acknowledgement.phtml @@ -44,7 +44,7 @@ $acknowledgement = $object->acknowledgement; } ?>