yolinlin/aowow
1
0
Fork 0
mirror of https://github.com/Sarjuuk/aowow.git synced 2025-11-29 15:58:16 +08:00
Code Issues Packages Projects Releases Wiki Activity

Pages/Quest

Browse Source 
* escape placeholder tags in quest name for display
This commit is contained in:
Sarjuuk
2018-08-26 16:49:29 +02:00
parent 6f578b31e0
commit 31ec17d279
2 changed files with 5 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
includes/types/quest.class.php
View File

@@ -313,7 +313,7 @@ class QuestList extends BaseType
if (!$this->curTpl) if (!$this->curTpl)
return null; return null;
$title = Util::jsEscape($this->getField('name', true)); $title = Util::jsEscape(htmlentities($this->getField('name', true)));
$level = $this->curTpl['level']; $level = $this->curTpl['level'];
if ($level < 0) if ($level < 0)
$level = 0; $level = 0;

6
pages/quest.php
View File

@@ -33,7 +33,8 @@ class QuestPage extends GenericPage
if ($this->subject->error) if ($this->subject->error)
$this->notFound(); $this->notFound();
$this->name = $this->subject->getField('name', true); // may contain htmlesque tags
$this->name = htmlentities($this->subject->getField('name', true));
} }
protected function generatePath() protected function generatePath()
@@ -46,7 +47,8 @@ class QuestPage extends GenericPage
protected function generateTitle() protected function generateTitle()
{ {
array_unshift($this->title, $this->name, Util::ucFirst(Lang::game('quest'))); // page title already escaped
array_unshift($this->title, $this->subject->getField('name', true), Util::ucFirst(Lang::game('quest')));
} }
protected function generateContent() protected function generateContent()