Changeset 28343 for extensions/ContactForm/admin/template/config.tpl

Timestamp:

May 4, 2014, 4:00:55 PM (10 years ago)

Author:

mistic100

Message:

fix escaping

File:

• extensions/ContactForm/admin/template/config.tpl (modified) (2 diffs)

extensions/ContactForm/admin/template/config.tpl

@@ -58 +58 @@
       <li>
         <label>
-          <input type="text" name="cf_default_subject" value="{$cf_default_subject}" size="50">
+          <input type="text" name="cf_default_subject" value="{$cf_default_subject|escape:html}" size="50">
           {'Default e-mail subject'|translate} ({'can be translated with LocalFiles Editor plugin'|translate})
         </label>
@@ -64 +64 @@
       <li>
         <label>
-          <input type="text" name="cf_subject_prefix" value="{$cf_subject_prefix}" size="50">
+          <input type="text" name="cf_subject_prefix" value="{$cf_subject_prefix|escape:html}" size="50">
           {'Prefix of the sent e-mail subject'|translate} ({'you can use "%gallery_title%"'|translate})
         </label>