mbk-lab
/
nextcloud
2
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

use sanitizeHTML() function

This commit is contained in:
Bjoern Schiessle 2012-06-20 15:11:14 +02:00
parent 0e61b5457b
commit 8e427d80d3
3 changed files with 5 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
apps/calendar/ajax/events.php
View File

@ -32,4 +32,4 @@ $output = array();
foreach($events as $event){ foreach($events as $event){
$output = array_merge($output, OC_Calendar_App::generateEventOutput($event, $start, $end)); $output = array_merge($output, OC_Calendar_App::generateEventOutput($event, $start, $end));
} }
OCP\JSON::encodedPrint($output); OCP\JSON::encodedPrint(OCP\Util::sanitizeHTML($output));

2
apps/calendar/js/calendar.js
View File

@ -824,7 +824,7 @@ $(document).ready(function(){
eventDrop: Calendar.UI.moveEvent, eventDrop: Calendar.UI.moveEvent,
eventResize: Calendar.UI.resizeEvent, eventResize: Calendar.UI.resizeEvent,
eventRender: function(event, element) { eventRender: function(event, element) {
element.find('.fc-event-title').html(element.find('.fc-event-title').text()); element.find('.fc-event-title').html(element.find('.fc-event-title').html());
element.tipsy({ element.tipsy({
className: 'tipsy-event', className: 'tipsy-event',
opacity: 0.9, opacity: 0.9,

6
apps/calendar/lib/object.php
View File

@ -600,8 +600,8 @@ class OC_Calendar_Object{
public static function updateVCalendarFromRequest($request, $vcalendar) public static function updateVCalendarFromRequest($request, $vcalendar)
{ {
$title = strip_tags($request["title"]); $title = $request["title"];
$location = strip_tags($request["location"]); $location = $request["location"];
$categories = $request["categories"]; $categories = $request["categories"];
$allday = isset($request["allday"]); $allday = isset($request["allday"]);
$from = $request["from"]; $from = $request["from"];
@ -611,7 +611,7 @@ class OC_Calendar_Object{
$totime = $request['totime']; $totime = $request['totime'];
} }
$vevent = $vcalendar->VEVENT; $vevent = $vcalendar->VEVENT;
$description = strip_tags($request["description"]); $description = $request["description"];
$repeat = $request["repeat"]; $repeat = $request["repeat"];
if($repeat != 'doesnotrepeat'){ if($repeat != 'doesnotrepeat'){
$rrule = ''; $rrule = '';