mbirth/LuckyCoinkydink
Archived
1
0
Fork 0
Code Issues Pull Requests Activity

Escaping JS instead of HTML.

Browse Source
This commit is contained in:
Matthias Mees
2013-02-07 19:34:02 +01:00
parent 8d1db9572f
commit 4d2801f6ae
3 changed files with 19 additions and 19 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
templates/bulletproof/entries.tpl
View File

@ -86,7 +86,7 @@
<script type="text/javascript">
addthis_url = '{$entry.rdf_ident|escape:url}';
addthis_title = '{$entry.title|escape:url}';
addthis_pub = '{$template_option.addthisaccount|@escape:"html"}';
addthis_pub = '{$template_option.addthisaccount|@escape:"javascript"}';
</script>
<script type="text/javascript" src="http://s7.addthis.com/js/addthis_widget.php?v=12" ></script>
</div>
@ -211,7 +211,7 @@
{if $template_option.addthiswidget == 'true'}
<div class="addthiswidget">
<a href="http://www.addthis.com/bookmark.php?v=250" onmouseover="return addthis_open(this, '', encodeURIComponent('{$entry.rdf_ident}'), encodeURIComponent('{$entry.title|escape:url}'));" onmouseout="addthis_close()" onclick="return addthis_sendto()" title="Bookmark and Share" target="_blank"><img src="http://s7.addthis.com/static/btn/lg-bookmark-en.gif" width="125" height="16" alt="Bookmark and Share" style="border:0" /></a>
<script type="text/javascript" src="http://s7.addthis.com/js/250/addthis_widget.js?pub={$template_option.addthisaccount|@escape:"html"}"></script>
<script type="text/javascript" src="http://s7.addthis.com/js/250/addthis_widget.js?pub={$template_option.addthisaccount|@escape:"javascript"}"></script>
</div>
{/if}
@ -267,7 +267,7 @@
<script type="text/javascript">
addthis_url = '{$entry.rdf_ident|escape:url}';
addthis_title = '{$entry.title|escape:url}';
addthis_pub = '{$template_option.addthisaccount|@escape:"html"}';
addthis_pub = '{$template_option.addthisaccount|@escape:"javascript"}';
</script>
<script type="text/javascript" src="http://s7.addthis.com/js/addthis_widget.php?v=12" ></script>
</div>