dinislage/PrestaShop
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

//replace some escape:'html' by addslashes in .tpl with javascript

Browse Source
This commit is contained in:
Vincent Augagneur committed 2013-06-28 11:06:08 +02:00
1 parent 32d3dd3e0f
commit dfc7456980
12 files changed
+25 -25
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

admin-dev/themes/default/template/controllers/orders/form.tpl
+2 -2
View File
@@ -100,7 +100,7 @@
$('#show_old_carts').click(); $('#show_old_carts').click();
$('#payment_module_name').change(); $('#payment_module_name').change();
$.ajaxSetup({ type:"post" }); $.ajaxSetup({ type:"post" });
$("#voucher").autocomplete('{$link->getAdminLink('AdminCartRules')|escape:'html'}', { $("#voucher").autocomplete('{$link->getAdminLink('AdminCartRules')|addslashes}', {
minChars: 3, minChars: 3,
max: 15, max: 15,
width: 250, width: 250,
@@ -468,7 +468,7 @@
$('#new_address').attr('href', address_link.replace(/id_customer=[0-9]+/, 'id_customer='+id_customer)); $('#new_address').attr('href', address_link.replace(/id_customer=[0-9]+/, 'id_customer='+id_customer));
$.ajax({ $.ajax({
type:"POST", type:"POST",
url : "{$link->getAdminLink('AdminCarts')|escape:'html'}", url : "{$link->getAdminLink('AdminCarts')|addslashes}",
async: false, async: false,
dataType: "json", dataType: "json",
data : { data : {
admin-dev/themes/default/template/controllers/orders/helpers/view/view.tpl
+1 -1
View File
@@ -27,7 +27,7 @@
{block name="override_tpl"} {block name="override_tpl"}
<script type="text/javascript"> <script type="text/javascript">
var admin_order_tab_link = "{$link->getAdminLink('AdminOrders')|escape:'html'}"; var admin_order_tab_link = "{$link->getAdminLink('AdminOrders')|addslashes}";
var id_order = {$order->id}; var id_order = {$order->id};
var id_lang = {$current_id_lang}; var id_lang = {$current_id_lang};
var id_currency = {$order->id_currency}; var id_currency = {$order->id_currency};
admin-dev/themes/default/template/controllers/products/informations.tpl
+1 -1
View File
@@ -43,7 +43,7 @@
$('document').ready( function() { $('document').ready( function() {
$(".check_product_name") $(".check_product_name")
.autocomplete( .autocomplete(
'{$link->getAdminLink('AdminProducts', true)|escape:'html'}', { '{$link->getAdminLink('AdminProducts', true)|addslashes}', {
minChars: 3, minChars: 3,
max: 10, max: 10,
width: $(".check_product_name").width(), width: $(".check_product_name").width(),
modules/favoriteproducts/views/templates/front/favoriteproducts-account.tpl
+1 -1
View File
@@ -32,7 +32,7 @@ $('document').ready(function()
var parent = $(this).parent().parent(); var parent = $(this).parent().parent();
$.ajax({ $.ajax({
url: "{$link->getModuleLink('favoriteproducts', 'actions', ['process' => 'remove'], true)|escape:'html'}", url: "{$link->getModuleLink('favoriteproducts', 'actions', ['process' => 'remove'], true)|addslashes}",
type: "POST", type: "POST",
data: { data: {
'id_product': idFavoriteProduct, 'id_product': idFavoriteProduct,
modules/mailalerts/views/templates/front/mailalerts-account.tpl
+1 -1
View File
@@ -35,7 +35,7 @@ $('document').ready(function()
var parent = $(this).parent().parent(); var parent = $(this).parent().parent();
$.ajax({ $.ajax({
url: "{$link->getModuleLink('mailalerts', 'actions', ['process' => 'remove'])|escape:'html'}", url: "{$link->getModuleLink('mailalerts', 'actions', ['process' => 'remove'])|addslashes}",
type: "POST", type: "POST",
data: { data: {
'id_product': id_product_mail_alert, 'id_product': id_product_mail_alert,
themes/default/mobile/order-address.tpl
+3 -3
View File
@@ -16,8 +16,8 @@
var txtProducts = "{l s='products' js=1}"; var txtProducts = "{l s='products' js=1}";
{/if} {/if}
var addressMultishippingUrl = "{$link->getPageLink('address', true, NULL, "back={$back_order_page}?step=1{'&multi-shipping=1'|urlencode}{if $back}&mod={$back|urlencode}{/if}")|escape:'html'}"; var addressMultishippingUrl = "{$link->getPageLink('address', true, NULL, "back={$back_order_page}?step=1{'&multi-shipping=1'|urlencode}{if $back}&mod={$back|urlencode}{/if}")|addslashes'}";
var addressUrl = "{$link->getPageLink('address', true, NULL, "back={$back_order_page}?step=1{if $back}&mod={$back}{/if}")|escape:'html'}"; var addressUrl = "{$link->getPageLink('address', true, NULL, "back={$back_order_page}?step=1{if $back}&mod={$back}{/if}")|addslashes'}";
var formatedAddressFieldsValuesList = new Array(); var formatedAddressFieldsValuesList = new Array();
@@ -59,7 +59,7 @@
dest_comp.html(''); dest_comp.html('');
li_content['title'] = adr_titles_vals[address_type]; li_content['title'] = adr_titles_vals[address_type];
li_content['update'] = '<a href="{$link->getPageLink('address', true, NULL, "id_address")|escape:'html'}'+id_address+'&amp;back={$back_order_page}?step=1{if $back}&mod={$back}{/if}" title="{l s='Update' js=1}" style="font-size:.9em;font-weight:normal;padding:8px 0;display:block;text-align:right">&raquo; {l s='Update' js=1}</a>'; li_content['update'] = '<a href="{$link->getPageLink('address', true, NULL, "id_address")|addslashes}'+id_address+'&amp;back={$back_order_page}?step=1{if $back}&mod={$back}{/if}" title="{l s='Update' js=1}" style="font-size:.9em;font-weight:normal;padding:8px 0;display:block;text-align:right">&raquo; {l s='Update' js=1}</a>';
appendAddressList(dest_comp, li_content, ordered_fields_name); appendAddressList(dest_comp, li_content, ordered_fields_name);
} }
themes/default/mobile/order-carrier.tpl
+1 -1
View File
@@ -14,7 +14,7 @@
var currencyBlank = '{$currencyBlank|intval}'; var currencyBlank = '{$currencyBlank|intval}';
var txtProduct = "{l s='product' js=1}"; var txtProduct = "{l s='product' js=1}";
var txtProducts = "{l s='products' js=1}"; var txtProducts = "{l s='products' js=1}";
var orderUrl = '{$link->getPageLink("order", true)|escape:'html'}'; var orderUrl = '{$link->getPageLink("order", true)|addslashes}';
var msg = "{l s='You must agree to the terms of service before continuing.' js=1}"; var msg = "{l s='You must agree to the terms of service before continuing.' js=1}";
{literal} {literal}
themes/default/mobile/order-opc.tpl
+5 -5
View File
@@ -33,11 +33,11 @@
<script type="text/javascript"> <script type="text/javascript">
// <![CDATA[ // <![CDATA[
var imgDir = '{$img_dir}'; var imgDir = '{$img_dir}';
var authenticationUrl = '{$link->getPageLink("authentication", true)|escape:'html'}'; var authenticationUrl = '{$link->getPageLink("authentication", true)|addslashes}';
var orderOpcUrl = '{$link->getPageLink("order-opc", true)|escape:'html'}'; var orderOpcUrl = '{$link->getPageLink("order-opc", true)|addslashes}';
var historyUrl = '{$link->getPageLink("history", true)|escape:'html'}'; var historyUrl = '{$link->getPageLink("history", true)|addslashes}';
var guestTrackingUrl = '{$link->getPageLink("guest-tracking", true)|escape:'html'}'; var guestTrackingUrl = '{$link->getPageLink("guest-tracking", true)|addslashes}';
var addressUrl = '{$link->getPageLink("address", true)|escape:'html'}'; var addressUrl = '{$link->getPageLink("address", true)|addslashes}';
var orderProcess = 'order-opc'; var orderProcess = 'order-opc';
var guestCheckoutEnabled = {$PS_GUEST_CHECKOUT_ENABLED|intval}; var guestCheckoutEnabled = {$PS_GUEST_CHECKOUT_ENABLED|intval};
var currencySign = '{$currencySign|html_entity_decode:2:"UTF-8"}'; var currencySign = '{$currencySign|html_entity_decode:2:"UTF-8"}';
themes/default/order-address-multishipping.tpl
+1 -1
View File
@@ -112,7 +112,7 @@
dest_comp.html(''); dest_comp.html('');
li_content['title'] = adr_titles_vals[address_type]; li_content['title'] = adr_titles_vals[address_type];
li_content['update'] = '<a href="{$link->getPageLink('address', true, NULL, "id_address")|escape:'html'}'+id_address+'&amp;back=order?step=1{if $back}&mod={$back}{/if}" title="{l s='Update' js=1}">{l s='Update' js=1}</a>'; li_content['update'] = '<a href="{$link->getPageLink('address', true, NULL, "id_address")|addslashes}'+id_address+'&amp;back=order?step=1{if $back}&mod={$back}{/if}" title="{l s='Update' js=1}">{l s='Update' js=1}</a>';
appendAddressList(dest_comp, li_content, ordered_fields_name); appendAddressList(dest_comp, li_content, ordered_fields_name);
} }
themes/default/order-address.tpl
+3 -3
View File
@@ -75,8 +75,8 @@
var txtProducts = "{l s='products' js=1}"; var txtProducts = "{l s='products' js=1}";
{/if} {/if}
var addressMultishippingUrl = "{$link->getPageLink('address', true, NULL, "back={$back_order_page}?step=1{'&multi-shipping=1'|urlencode}{if $back}&mod={$back|urlencode}{/if}")|escape:'html'}"; var addressMultishippingUrl = "{$link->getPageLink('address', true, NULL, "back={$back_order_page}?step=1{'&multi-shipping=1'|urlencode}{if $back}&mod={$back|urlencode}{/if}")|addslashes}";
var addressUrl = "{$link->getPageLink('address', true, NULL, "back={$back_order_page}?step=1{if $back}&mod={$back}{/if}")|escape:'html'}"; var addressUrl = "{$link->getPageLink('address', true, NULL, "back={$back_order_page}?step=1{if $back}&mod={$back}{/if}")|addslashes}";
var formatedAddressFieldsValuesList = new Array(); var formatedAddressFieldsValuesList = new Array();
@@ -116,7 +116,7 @@
dest_comp.html(''); dest_comp.html('');
li_content['title'] = adr_titles_vals[address_type]; li_content['title'] = adr_titles_vals[address_type];
li_content['update'] = '<a href="{$link->getPageLink('address', true, NULL, "id_address")|escape:'html'}'+id_address+'&amp;back={$back_order_page}?step=1{if $back}&mod={$back}{/if}" title="{l s='Update' js=1}">&raquo; {l s='Update' js=1}</a>'; li_content['update'] = '<a href="{$link->getPageLink('address', true, NULL, "id_address")|addslashes}'+id_address+'&amp;back={$back_order_page}?step=1{if $back}&mod={$back}{/if}" title="{l s='Update' js=1}">&raquo; {l s='Update' js=1}</a>';
appendAddressList(dest_comp, li_content, ordered_fields_name); appendAddressList(dest_comp, li_content, ordered_fields_name);
} }
themes/default/order-carrier.tpl
+1 -1
View File
@@ -32,7 +32,7 @@
var currencyBlank = '{$currencyBlank|intval}'; var currencyBlank = '{$currencyBlank|intval}';
var txtProduct = "{l s='Product' js=1}"; var txtProduct = "{l s='Product' js=1}";
var txtProducts = "{l s='Products' js=1}"; var txtProducts = "{l s='Products' js=1}";
var orderUrl = '{$link->getPageLink("order", true)|escape:'html'}'; var orderUrl = '{$link->getPageLink("order", true)|addslashes}';
var msg = "{l s='You must agree to the terms of service before continuing.' js=1}"; var msg = "{l s='You must agree to the terms of service before continuing.' js=1}";
{literal} {literal}
themes/default/order-opc.tpl
+5 -5
View File
@@ -38,11 +38,11 @@
<script type="text/javascript"> <script type="text/javascript">
// <![CDATA[ // <![CDATA[
var imgDir = '{$img_dir}'; var imgDir = '{$img_dir}';
var authenticationUrl = '{$link->getPageLink("authentication", true)|escape:'html'}'; var authenticationUrl = '{$link->getPageLink("authentication", true)|addslashes}';
var orderOpcUrl = '{$link->getPageLink("order-opc", true)|escape:'html'}'; var orderOpcUrl = '{$link->getPageLink("order-opc", true)|addslashes}';
var historyUrl = '{$link->getPageLink("history", true)|escape:'html'}'; var historyUrl = '{$link->getPageLink("history", true)|addslashes}';
var guestTrackingUrl = '{$link->getPageLink("guest-tracking", true)|escape:'html'}'; var guestTrackingUrl = '{$link->getPageLink("guest-tracking", true)|addslashes}';
var addressUrl = '{$link->getPageLink("address", true, NULL, "back={$back_order_page}")|escape:'html'}'; var addressUrl = '{$link->getPageLink("address", true, NULL, "back={$back_order_page}")|addslashes}';
var orderProcess = 'order-opc'; var orderProcess = 'order-opc';
var guestCheckoutEnabled = {$PS_GUEST_CHECKOUT_ENABLED|intval}; var guestCheckoutEnabled = {$PS_GUEST_CHECKOUT_ENABLED|intval};
var currencySign = '{$currencySign|html_entity_decode:2:"UTF-8"}'; var currencySign = '{$currencySign|html_entity_decode:2:"UTF-8"}';