mbirth/LuckyCoinkydink
1
0
Fork 0
Code Issues Pull Requests Activity

Escaping JS instead of HTML.

Browse Source
This commit is contained in:
Matthias Mees 2013-02-07 19:34:02 +01:00
parent 8d1db9572f
commit 4d2801f6ae
3 changed files with 19 additions and 19 deletions
templates
2k11
index.tpl
bulletproof
entries.tplindex.tpl

2
templates/2k11/index.tpl

@ -59,7 +59,7 @@
</form>
{serendipity_hookPlugin hook="quicksearch_plugin" hookAll="true"}
{if $template_option.header_img}
<img src="{$template_option.header_img|@escape:"html"}" alt="">
<img src="{$template_option.header_img|@escape:"javascript"}" alt="">
{/if}
</header>
{if $template_option.use_corenav}

6
templates/bulletproof/entries.tpl

@ -86,7 +86,7 @@
<script type="text/javascript">
addthis_url = '{$entry.rdf_ident|escape:url}';
addthis_title = '{$entry.title|escape:url}';
addthis_pub = '{$template_option.addthisaccount|@escape:"html"}';
addthis_pub = '{$template_option.addthisaccount|@escape:"javascript"}';
</script>
<script type="text/javascript" src="http://s7.addthis.com/js/addthis_widget.php?v=12" ></script>
</div>
@ -211,7 +211,7 @@
{if $template_option.addthiswidget == 'true'}
<div class="addthiswidget">
<a href="http://www.addthis.com/bookmark.php?v=250" onmouseover="return addthis_open(this, '', encodeURIComponent('{$entry.rdf_ident}'), encodeURIComponent('{$entry.title|escape:url}'));" onmouseout="addthis_close()" onclick="return addthis_sendto()" title="Bookmark and Share" target="_blank"><img src="http://s7.addthis.com/static/btn/lg-bookmark-en.gif" width="125" height="16" alt="Bookmark and Share" style="border:0" /></a>
<script type="text/javascript" src="http://s7.addthis.com/js/250/addthis_widget.js?pub={$template_option.addthisaccount|@escape:"html"}"></script>
<script type="text/javascript" src="http://s7.addthis.com/js/250/addthis_widget.js?pub={$template_option.addthisaccount|@escape:"javascript"}"></script>
</div>
{/if}
@ -267,7 +267,7 @@
<script type="text/javascript">
addthis_url = '{$entry.rdf_ident|escape:url}';
addthis_title = '{$entry.title|escape:url}';
addthis_pub = '{$template_option.addthisaccount|@escape:"html"}';
addthis_pub = '{$template_option.addthisaccount|@escape:"javascript"}';
</script>
<script type="text/javascript" src="http://s7.addthis.com/js/addthis_widget.php?v=12" ></script>
</div>

30
templates/bulletproof/index.tpl

@ -34,7 +34,7 @@
{if $template_option.custheader == 'true'}
<style type="text/css">
#serendipity_banner {ldelim}
background-image: url({$random_headerimage|@default:$template_option.headerimage|@escape:"html"});
background-image: url({$random_headerimage|@default:$template_option.headerimage|@escape:"javascript"});
background-position: {$template_option.headerposhor} {$template_option.headerposver};
{if $template_option.headertype == 'banner'}
background-repeat: no-repeat;
@ -142,7 +142,7 @@
{if $template_option.sitenavpos == 'left'}
<!-- #sbsitenav: like #sitenav, but placed within the sidebar -->
<div id="sbsitenav" class="serendipitySideBarItem">
<h3 class="serendipitySideBarTitle">{$template_option.sitenav_sidebar_title|@escape:"html"}</h3>
<h3 class="serendipitySideBarTitle">{$template_option.sitenav_sidebar_title|@escape:"javascript"}</h3>
<div class="serendipitySideBarContent">
<!-- the line below must remain as a single uninterrupted line to display correctly in ie6 -->
<ul>{foreach from=$navlinks item="navlink" name="sbnav"}<li class="{if $currpage==$navlink.href or $currpage2==$navlink.href}currentpage{/if}{if $smarty.foreach.sbnav.first} sbnavlink_first{/if}{if $smarty.foreach.sbnav.last} sbnavlink_last{/if}"><a href="{$navlink.href}" title="{$navlink.title}">{$navlink.title}</a></li>{/foreach}</ul>
@ -159,7 +159,7 @@
{if $template_option.sitenavpos == 'right'}
<!-- #sbsitenav: like #sitenav, but placed within the sidebar -->
<div id="sbsitenav" class="serendipitySideBarItem">
<h3 class="serendipitySideBarTitle">{$template_option.sitenav_sidebar_title|@escape:"html"}</h3>
<h3 class="serendipitySideBarTitle">{$template_option.sitenav_sidebar_title|@escape:"javascript"}</h3>
<div class="serendipitySideBarContent">
<!-- the line below must remain as a single uninterrupted line to display correctly in ie6 -->
<ul>{foreach from=$navlinks item="navlink" name="sbnav"}<li class="{if $currpage==$navlink.href or $currpage2==$navlink.href}currentpage{/if}{if $smarty.foreach.sbnav.first} sbnavlink_first{/if}{if $smarty.foreach.sbnav.last} sbnavlink_last{/if}"><a href="{$navlink.href}" title="{$navlink.title}">{$navlink.title}</a></li>{/foreach}</ul>
@ -180,7 +180,7 @@
{if $template_option.sitenavpos == 'left'}
<!-- #sbsitenav: like #sitenav, but placed within the sidebar -->
<div id="sbsitenav" class="serendipitySideBarItem">
<h3 class="serendipitySideBarTitle">{$template_option.sitenav_sidebar_title|@escape:"html"}</h3>
<h3 class="serendipitySideBarTitle">{$template_option.sitenav_sidebar_title|@escape:"javascript"}</h3>
<div class="serendipitySideBarContent">
<!-- the line below must remain as a single uninterrupted line to display correctly in ie6 -->
<ul>{foreach from=$navlinks item="navlink" name="sbnav"}<li class="{if $currpage==$navlink.href or $currpage2==$navlink.href}currentpage{/if}{if $smarty.foreach.sbnav.first} sbnavlink_first{/if}{if $smarty.foreach.sbnav.last} sbnavlink_last{/if}"><a href="{$navlink.href}" title="{$navlink.title}">{$navlink.title}</a></li>{/foreach}</ul>
@ -194,7 +194,7 @@
{if $template_option.sitenavpos == 'right'}
<!-- #sbsitenav: like #sitenav, but placed within the sidebar -->
<div id="sbsitenav" class="serendipitySideBarItem">
<h3 class="serendipitySideBarTitle">{$template_option.sitenav_sidebar_title|@escape:"html"}</h3>
<h3 class="serendipitySideBarTitle">{$template_option.sitenav_sidebar_title|@escape:"javascript"}</h3>
<div class="serendipitySideBarContent">
<!-- the line below must remain as a single uninterrupted line to display correctly in ie6 -->
<ul>{foreach from=$navlinks item="navlink" name="sbnav"}<li class="{if $currpage==$navlink.href or $currpage2==$navlink.href}currentpage{/if}{if $smarty.foreach.sbnav.first} sbnavlink_first{/if}{if $smarty.foreach.sbnav.last} sbnavlink_last{/if}"><a href="{$navlink.href}" title="{$navlink.title}">{$navlink.title}</a></li>{/foreach}</ul>
@ -212,7 +212,7 @@
{if $template_option.sitenavpos == 'left'}
<!-- #sbsitenav: like #sitenav, but placed within the sidebar -->
<div id="sbsitenav" class="serendipitySideBarItem">
<h3 class="serendipitySideBarTitle">{$template_option.sitenav_sidebar_title|@escape:"html"}</h3>
<h3 class="serendipitySideBarTitle">{$template_option.sitenav_sidebar_title|@escape:"javascript"}</h3>
<div class="serendipitySideBarContent">
<!-- the line below must remain as a single uninterrupted line to display correctly in ie6 -->
<ul>{foreach from=$navlinks item="navlink" name="sbnav"}<li class="{if $currpage==$navlink.href or $currpage2==$navlink.href}currentpage{/if}{if $smarty.foreach.sbnav.first} sbnavlink_first{/if}{if $smarty.foreach.sbnav.last} sbnavlink_last{/if}"><a href="{$navlink.href}" title="{$navlink.title}">{$navlink.title}</a></li>{/foreach}</ul>
@ -226,7 +226,7 @@
{if $template_option.sitenavpos == 'right'}
<!-- #sbsitenav: like #sitenav, but placed within the sidebar -->
<div id="sbsitenav" class="serendipitySideBarItem">
<h3 class="serendipitySideBarTitle">{$template_option.sitenav_sidebar_title|@escape:"html"}</h3>
<h3 class="serendipitySideBarTitle">{$template_option.sitenav_sidebar_title|@escape:"javascript"}</h3>
<div class="serendipitySideBarContent">
<!-- the line below must remain as a single uninterrupted line to display correctly in ie6 -->
<ul>{foreach from=$navlinks item="navlink" name="sbnav"}<li class="{if $currpage==$navlink.href or $currpage2==$navlink.href}currentpage{/if}{if $smarty.foreach.sbnav.first} sbnavlink_first{/if}{if $smarty.foreach.sbnav.last} sbnavlink_last{/if}"><a href="{$navlink.href}" title="{$navlink.title}">{$navlink.title}</a></li>{/foreach}</ul>
@ -247,7 +247,7 @@
{if $template_option.sitenavpos == 'left' or $template_option.sitenavpos == 'right'}
<!-- #sbsitenav: like #sitenav, but placed within the sidebar -->
<div id="sbsitenav" class="serendipitySideBarItem">
<h3 class="serendipitySideBarTitle">{$template_option.sitenav_sidebar_title|@escape:"html"}</h3>
<h3 class="serendipitySideBarTitle">{$template_option.sitenav_sidebar_title|@escape:"javascript"}</h3>
<div class="serendipitySideBarContent">
<!-- the line below must remain as a single uninterrupted line to display correctly in ie6 -->
<ul>{foreach from=$navlinks item="navlink" name="sbnav"}<li class="{if $currpage==$navlink.href or $currpage2==$navlink.href}currentpage{/if}{if $smarty.foreach.sbnav.first} sbnavlink_first{/if}{if $smarty.foreach.sbnav.last} sbnavlink_last{/if}"><a href="{$navlink.href}" title="{$navlink.title}">{$navlink.title}</a></li>{/foreach}</ul>
@ -272,7 +272,7 @@
{if $template_option.sitenavpos == 'left' or $template_option.sitenavpos == 'right'}
<!-- #sbsitenav: like #sitenav, but placed within the sidebar -->
<div id="sbsitenav" class="serendipitySideBarItem">
<h3 class="serendipitySideBarTitle">{$template_option.sitenav_sidebar_title|@escape:"html"}</h3>
<h3 class="serendipitySideBarTitle">{$template_option.sitenav_sidebar_title|@escape:"javascript"}</h3>
<div class="serendipitySideBarContent">
<!-- the line below must remain as a single uninterrupted line to display correctly in ie6 -->
<ul>{foreach from=$navlinks item="navlink" name="sbnav"}<li class="{if $currpage==$navlink.href or $currpage2==$navlink.href}currentpage{/if}{if $smarty.foreach.sbnav.first} sbnavlink_first{/if}{if $smarty.foreach.sbnav.last} sbnavlink_last{/if}"><a href="{$navlink.href}" title="{$navlink.title}">{$navlink.title}</a></li>{/foreach}</ul>
@ -295,7 +295,7 @@
{if $template_option.sitenavpos == 'left' || $template_option.sitenavpos == 'right'}
<!-- #sbsitenav: like #sitenav, but placed within the sidebar -->
<div id="sbsitenav" class="serendipitySideBarItem">
<h3 class="serendipitySideBarTitle">{$template_option.sitenav_sidebar_title|@escape:"html"}</h3>
<h3 class="serendipitySideBarTitle">{$template_option.sitenav_sidebar_title|@escape:"javascript"}</h3>
<div class="serendipitySideBarContent">
<!-- the line below must remain as a single uninterrupted line to display correctly in ie6 -->
<ul>{foreach from=$navlinks item="navlink" name="sbnav"}<li class="{if $currpage==$navlink.href or $currpage2==$navlink.href}currentpage{/if}{if $smarty.foreach.sbnav.first} sbnavlink_first{/if}{if $smarty.foreach.sbnav.last} sbnavlink_last{/if}"><a href="{$navlink.href}" title="{$navlink.title}">{$navlink.title}</a></li>{/foreach}</ul>
@ -314,7 +314,7 @@
{if $template_option.sitenavpos == 'left'}
<!-- #sbsitenav: like #sitenav, but placed within the sidebar -->
<div id="sbsitenav" class="serendipitySideBarItem">
<h3 class="serendipitySideBarTitle">{$template_option.sitenav_sidebar_title|@escape:"html"}</h3>
<h3 class="serendipitySideBarTitle">{$template_option.sitenav_sidebar_title|@escape:"javascript"}</h3>
<div class="serendipitySideBarContent">
<!-- the line below must remain as a single uninterrupted line to display correctly in ie6 -->
<ul>{foreach from=$navlinks item="navlink" name="sbnav"}<li class="{if $currpage==$navlink.href or $currpage2==$navlink.href}currentpage{/if}{if $smarty.foreach.sbnav.first} sbnavlink_first{/if}{if $smarty.foreach.sbnav.last} sbnavlink_last{/if}"><a href="{$navlink.href}" title="{$navlink.title}">{$navlink.title}</a></li>{/foreach}</ul>
@ -331,7 +331,7 @@
{if $template_option.sitenavpos == 'right'}
<!-- #sbsitenav: like #sitenav, but placed within the sidebar -->
<div id="sbsitenav" class="serendipitySideBarItem">
<h3 class="serendipitySideBarTitle">{$template_option.sitenav_sidebar_title|@escape:"html"}</h3>
<h3 class="serendipitySideBarTitle">{$template_option.sitenav_sidebar_title|@escape:"javascript"}</h3>
<div class="serendipitySideBarContent">
<!-- the line below must remain as a single uninterrupted line to display correctly in ie6 -->
<ul>{foreach from=$navlinks item="navlink" name="sbnav"}<li class="{if $currpage==$navlink.href or $currpage2==$navlink.href}currentpage{/if}{if $smarty.foreach.sbnav.first} sbnavlink_first{/if}{if $smarty.foreach.sbnav.last} sbnavlink_last{/if}"><a href="{$navlink.href}" title="{$navlink.title}">{$navlink.title}</a></li>{/foreach}</ul>
@ -352,7 +352,7 @@
{if $template_option.sitenavpos == 'right'}
<!-- #sbsitenav: like #sitenav, but placed within the sidebar -->
<div id="sbsitenav" class="serendipitySideBarItem">
<h3 class="serendipitySideBarTitle">{$template_option.sitenav_sidebar_title|@escape:"html"}</h3>
<h3 class="serendipitySideBarTitle">{$template_option.sitenav_sidebar_title|@escape:"javascript"}</h3>
<div class="serendipitySideBarContent">
<!-- the line below must remain as a single uninterrupted line to display correctly in ie6 -->
<ul>{foreach from=$navlinks item="navlink" name="sbnav"}<li class="{if $currpage==$navlink.href or $currpage2==$navlink.href}currentpage{/if}{if $smarty.foreach.sbnav.first} sbnavlink_first{/if}{if $smarty.foreach.sbnav.last} sbnavlink_last{/if}"><a href="{$navlink.href}" title="{$navlink.title}">{$navlink.title}</a></li>{/foreach}</ul>
@ -366,7 +366,7 @@
{if $template_option.sitenavpos == 'left'}
<!-- #sbsitenav: like #sitenav, but placed within the sidebar -->
<div id="sbsitenav" class="serendipitySideBarItem">
<h3 class="serendipitySideBarTitle">{$template_option.sitenav_sidebar_title|@escape:"html"}</h3>
<h3 class="serendipitySideBarTitle">{$template_option.sitenav_sidebar_title|@escape:"javascript"}</h3>
<div class="serendipitySideBarContent">
<!-- the line below must remain as a single uninterrupted line to display correctly in ie6 -->
<ul>{foreach from=$navlinks item="navlink" name="sbnav"}<li class="{if $currpage==$navlink.href or $currpage2==$navlink.href}currentpage{/if}{if $smarty.foreach.sbnav.first} sbnavlink_first{/if}{if $smarty.foreach.sbnav.last} sbnavlink_last{/if}"><a href="{$navlink.href}" title="{$navlink.title}">{$navlink.title}</a></li>{/foreach}</ul>
@ -396,7 +396,7 @@
<!-- if you create a custom template based on bulletproof. -->
<!-- ************************************************************** -->
<div id="serendipity_credit_line">{$CONST.POWERED_BY} <a href="http://www.s9y.org">s9y</a> &ndash; Template by <a href="http://s9y-bulletproof.com">Bulletproof development team</a>.<br />{$template_option.colorset_data.attribution|@escape:"html"}</div>
<div id="serendipity_credit_line">{$CONST.POWERED_BY} <a href="http://www.s9y.org">s9y</a> &ndash; Template by <a href="http://s9y-bulletproof.com">Bulletproof development team</a>.<br />{$template_option.colorset_data.attribution|@escape:"javascript"}</div>
{if $template_option.counter_code_toggle == 'true'}
<div class="counter_code">{$template_option.counter_code}</div>