Changeset 21175

Timestamp:

Mar 4, 2013, 3:31:46 PM (11 years ago)

Author:

plg

Message:

bug 2859 fixed: sanitize of photo title before use in title/alt HTML attributes

Location:

trunk/themes/default/template

Files:

• picture.tpl (modified) (1 diff)
• picture_content.tpl (modified) (1 diff)
• picture_nav_buttons.tpl (modified) (2 diffs)

trunk/themes/default/template/picture.tpl

@@ -135 +135 @@
         <div class="navThumbs">
                 {if isset($previous)}
-                        <a class="navThumb" id="linkPrev" href="{$previous.U_IMG}" title="{'Previous'|@translate} : {$previous.TITLE}" rel="prev">
+                        <a class="navThumb" id="linkPrev" href="{$previous.U_IMG}" title="{'Previous'|@translate} :: {$previous.TITLE|@escape}" rel="prev">
                                 <span class="thumbHover prevThumbHover"></span>
-                                <img src="{$previous.derivatives.square->get_url()}" alt="{$previous.TITLE}">
+                                <img src="{$previous.derivatives.square->get_url()}" alt="{$previous.TITLE|@escape}">
                         </a>
                 {/if}
                 {if isset($next)}
-                        <a class="navThumb" id="linkNext" href="{$next.U_IMG}" title="{'Next'|@translate} : {$next.TITLE}" rel="next">
+                        <a class="navThumb" id="linkNext" href="{$next.U_IMG}" title="{'Next'|@translate} : {$next.TITLE|@escape}" rel="next">
                                 <span class="thumbHover nextThumbHover"></span>
-                                <img src="{$next.derivatives.square->get_url()}" alt="{$next.TITLE}">
+                                <img src="{$next.derivatives.square->get_url()}" alt="{$next.TITLE|@escape}">
                         </a>
                 {/if}

trunk/themes/default/template/picture_content.tpl

@@ -11 +11 @@
 {assign var='size' value=$derivative->get_size()}
 {if isset($previous)}
-<area shape=rect coords="0,0,{$size[0]/4|@intval},{$size[1]}" href="{$previous.U_IMG}" title="{'Previous'|@translate} : {$previous.TITLE}" alt="{$previous.TITLE}">
+<area shape=rect coords="0,0,{$size[0]/4|@intval},{$size[1]}" href="{$previous.U_IMG}" title="{'Previous'|@translate} : {$previous.TITLE|@escape}" alt="{$previous.TITLE|@escape}">
 {/if}
 <area shape=rect coords="{$size[0]/4|@intval},0,{$size[0]/1.34|@intval},{$size[1]/4|@intval}" href="{$U_UP}" title="{'Thumbnails'|@translate}" alt="{'Thumbnails'|@translate}">
 {if isset($next)}
-<area shape=rect coords="{$size[0]/1.33|@intval},0,{$size[0]},{$size[1]}" href="{$next.U_IMG}" title="{'Next'|@translate} : {$next.TITLE}" alt="{$next.TITLE}">
+<area shape=rect coords="{$size[0]/1.33|@intval},0,{$size[0]},{$size[1]}" href="{$next.U_IMG}" title="{'Next'|@translate} : {$next.TITLE|@escape}" alt="{$next.TITLE|@escape}">
 {/if}
 </map>

trunk/themes/default/template/picture_nav_buttons.tpl

@@ -46 +46 @@
 {/if}{/strip}
 {strip}{if isset($previous)}
-        <a href="{$previous.U_IMG}" title="{'Previous'|@translate} : {$previous.TITLE}" class="pwg-state-default pwg-button">
+        <a href="{$previous.U_IMG}" title="{'Previous'|@translate} : {$previous.TITLE|@escape}" class="pwg-state-default pwg-button">
                 <span class="pwg-icon pwg-icon-arrow-w">&nbsp;</span><span class="pwg-button-text">{'Previous'|@translate}</span>
         </a>
@@ -65 +65 @@
 {/if}
 {strip}{if isset($next)}
-        <a href="{$next.U_IMG}" title="{'Next'|@translate} : {$next.TITLE}" class="pwg-state-default pwg-button pwg-button-icon-right">
+        <a href="{$next.U_IMG}" title="{'Next'|@translate} : {$next.TITLE|@escape}" class="pwg-state-default pwg-button pwg-button-icon-right">
                 <span class="pwg-icon pwg-icon-arrow-e">&nbsp;</span><span class="pwg-button-text">{'Next'|@translate}</span>
         </a>