fixed a bug of not escaping comment output in the code revision view

This commit is contained in:
hyung-hwan 2015-04-17 11:18:48 +00:00
parent 4524a85301
commit 22be8a0803

View File

@ -9,6 +9,13 @@
<script type="text/javascript" src="<?php print base_url_make('/js/creole.js')?>"></script>
<script type="text/javascript" src="<?php print base_url_make('/js/prettify/prettify.js')?>"></script>
<script type="text/javascript" src="<?php print base_url_make('/js/prettify/lang-css.js')?>"></script>
<script type="text/javascript" src="<?php print base_url_make('/js/prettify/lang-lisp.js')?>"></script>
<script type="text/javascript" src="<?php print base_url_make('/js/prettify/lang-lua.js')?>"></script>
<script type="text/javascript" src="<?php print base_url_make('/js/prettify/lang-sql.js')?>"></script>
<script type="text/javascript" src="<?php print base_url_make('/js/prettify/lang-vb.js')?>"></script>
<script type="text/javascript" src="<?php print base_url_make('/js/jquery.min.js')?>"></script>
<script type="text/javascript" src="<?php print base_url_make('/js/jquery-ui.min.js')?>"></script>
<link type="text/css" rel="stylesheet" href="<?php print base_url_make('/css/jquery-ui.css')?>" />
@ -196,6 +203,8 @@ function render_wiki()
<?php
print "}\n";
?>
prettyPrint ();
}
function hide_unneeded_divs()
@ -504,7 +513,7 @@ $history = $file['history'];
print "<div id='code_revision_mainarea_review_comment_{$i}' class='review_comment_text'>\n";
print "<pre id='code_revision_mainarea_review_comment_text_{$i}' style='visibility: hidden'>\n";
print $rc->comment;
print htmlspecialchars($rc->comment);
print "</pre>\n";
print "</div>\n";