fixed a bug of not escaping comment output in the code revision view
This commit is contained in:
		| @ -9,6 +9,13 @@ | |||||||
|  |  | ||||||
| <script type="text/javascript" src="<?php print base_url_make('/js/creole.js')?>"></script> | <script type="text/javascript" src="<?php print base_url_make('/js/creole.js')?>"></script> | ||||||
|  |  | ||||||
|  | <script type="text/javascript" src="<?php print base_url_make('/js/prettify/prettify.js')?>"></script> | ||||||
|  | <script type="text/javascript" src="<?php print base_url_make('/js/prettify/lang-css.js')?>"></script> | ||||||
|  | <script type="text/javascript" src="<?php print base_url_make('/js/prettify/lang-lisp.js')?>"></script> | ||||||
|  | <script type="text/javascript" src="<?php print base_url_make('/js/prettify/lang-lua.js')?>"></script> | ||||||
|  | <script type="text/javascript" src="<?php print base_url_make('/js/prettify/lang-sql.js')?>"></script> | ||||||
|  | <script type="text/javascript" src="<?php print base_url_make('/js/prettify/lang-vb.js')?>"></script> | ||||||
|  |  | ||||||
| <script type="text/javascript" src="<?php print base_url_make('/js/jquery.min.js')?>"></script> | <script type="text/javascript" src="<?php print base_url_make('/js/jquery.min.js')?>"></script> | ||||||
| <script type="text/javascript" src="<?php print base_url_make('/js/jquery-ui.min.js')?>"></script> | <script type="text/javascript" src="<?php print base_url_make('/js/jquery-ui.min.js')?>"></script> | ||||||
| <link type="text/css" rel="stylesheet" href="<?php print base_url_make('/css/jquery-ui.css')?>" /> | <link type="text/css" rel="stylesheet" href="<?php print base_url_make('/css/jquery-ui.css')?>" /> | ||||||
| @ -196,6 +203,8 @@ function render_wiki() | |||||||
| 	<?php | 	<?php | ||||||
| 	print "}\n"; | 	print "}\n"; | ||||||
| 	?> | 	?> | ||||||
|  |  | ||||||
|  | 	prettyPrint (); | ||||||
| } | } | ||||||
|  |  | ||||||
| function hide_unneeded_divs() | function hide_unneeded_divs() | ||||||
| @ -504,7 +513,7 @@ $history = $file['history']; | |||||||
| 		print "<div id='code_revision_mainarea_review_comment_{$i}' class='review_comment_text'>\n"; | 		print "<div id='code_revision_mainarea_review_comment_{$i}' class='review_comment_text'>\n"; | ||||||
| 		print "<pre id='code_revision_mainarea_review_comment_text_{$i}' style='visibility: hidden'>\n"; | 		print "<pre id='code_revision_mainarea_review_comment_text_{$i}' style='visibility: hidden'>\n"; | ||||||
|  |  | ||||||
| 		print $rc->comment; | 		print htmlspecialchars($rc->comment); | ||||||
|  |  | ||||||
| 		print "</pre>\n"; | 		print "</pre>\n"; | ||||||
| 		print "</div>\n"; | 		print "</div>\n"; | ||||||
|  | |||||||
		Reference in New Issue
	
	Block a user