Commit 6851c362 authored by Richard Mansfield's avatar Richard Mansfield
Browse files

Escape some user content in plans blocktype


Signed-off-by: default avatarRichard Mansfield <richardm@catalyst.net.nz>
parent 86dc416f
{auto_escape on}
<div class="blockinstance-content">
{if $tasks.data}
<table id="tasktable_{$blockid}">
......@@ -42,4 +41,3 @@ addLoadEvent(function() {
<p>{str tag='notasks' section='artefact.plans'}</p>
{/if}
</div>
{auto_escape off}
\ No newline at end of file
{auto_escape on}
{foreach from=$tasks.data item=task}
{if $task->completed == -1}
<tr class="plan_incomplete">
<td class="c1">{$task->completiondate|safe}</td>
<td class="c1">{$task->completiondate}</td>
{if $task->description}
<td class="c2"><a class="task-title" href="">{$task->title|safe}</a>
<div class="task-desc hidden">{$task->description|safe}</div></td>
<td class="c2"><a class="task-title" href="">{$task->title}</a>
<div class="task-desc hidden">{$task->description}</div></td>
{else}
<td class="c2">{$task->title|safe}</td>
<td class="c2">{$task->title}</td>
{/if}
<td class="c3">&nbsp;</td>
</tr>
{else}
<tr class="{cycle values='r0,r1'}">
<td class="c1">{$task->completiondate|safe}</td>
<td class="c1">{$task->completiondate}</td>
{if $task->description}
<td class="c2"><a class="task-title" href="">{$task->title|safe}</a>
<div class="task-desc hidden" id="task-desc-{$task->id}">{$task->description|safe}</div></td>
<td class="c2"><a class="task-title" href="">{$task->title}</a>
<div class="task-desc hidden" id="task-desc-{$task->id}">{$task->description}</div></td>
{else}
<td class="c2">{$task->title|safe}</td>
<td class="c2">{$task->title}</td>
{/if}
{if $task->completed == 1}
<td class="c3"><div class="plan_completed"><img src="{$WWWROOT}theme/raw/static/images/success.gif" alt="" /></div></td>
......@@ -27,4 +26,3 @@
{/if}
</tr>
{/if}
{auto_escape off}
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment