smarty-php/smarty
1
0
Fork 0
mirror of https://github.com/smarty-php/smarty.git synced 2025-08-05 19:04:27 +02:00
Code Issues Packages Projects Releases Wiki Activity

- bugfix escape Smarty exception messages to avoid possible script execution

Browse Source
This commit is contained in:
uwe.tews@googlemail.com
2012-09-11 16:23:30 +00:00
parent 81a6d0869b
commit 4305a8931c
2 changed files with 10 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
change_log.txt
View File

@@ -1,4 +1,7 @@
===== trunk ===== ===== trunk =====
11.09.2012
- bugfix escape Smarty exception messages to avoid possible script execution
10.09.2012 10.09.2012
- bugfix tag option flags and shorttag attributes did not work when rdel started with '=' (Forum Topic 22979) - bugfix tag option flags and shorttag attributes did not work when rdel started with '=' (Forum Topic 22979)

3
libs/Smarty.class.php
View File

@@ -1481,6 +1481,9 @@ if (Smarty::$_CHARSET !== 'UTF-8') {
* @package Smarty * @package Smarty
*/ */
class SmartyException extends Exception { class SmartyException extends Exception {
public function __construct($message) {
$this->message = htmlentities($message);
}
} }
/** /**