chg: [elements:serverRuleElements] Added preventive sanitizations

pull/7354/head
mokaddem 2021-04-22 10:58:07 +02:00
parent f6f6b102f6
commit 14a34dfbca
No known key found for this signature in database
GPG Key ID: 164C473F627A06FA
1 changed files with 15 additions and 15 deletions

View File

@ -5,7 +5,7 @@ $seed = rand();
<div style="display: flex;" class="rules-widget-container container-seed-<?= $seed ?>" data-funname="initRuleWidgetPicker<?= $seed ?>"> <div style="display: flex;" class="rules-widget-container container-seed-<?= $seed ?>" data-funname="initRuleWidgetPicker<?= $seed ?>">
<div style="flex-grow: 1;"> <div style="flex-grow: 1;">
<div class="bold green" style="display: flex; align-items: center;"> <div class="bold green" style="display: flex; align-items: center;">
<?= __('Allowed %s (OR)', Inflector::pluralize($scopeI18n));?> <?= __('Allowed %s (OR)', Inflector::pluralize(h($scopeI18n)));?>
<i <i
class="useCursorPointer <?= $this->FontAwesome->getClass('trash') ?>" class="useCursorPointer <?= $this->FontAwesome->getClass('trash') ?>"
style="margin-left: auto;" style="margin-left: auto;"
@ -14,7 +14,7 @@ $seed = rand();
></i> ></i>
</div> </div>
<select <select
id="<?= sprintf('%s%sLeftValues', Inflector::pluralize($scope), $technique) ?>" id="<?= sprintf('%s%sLeftValues', Inflector::pluralize(h($scope)), h($technique)) ?>"
size="6" multiple size="6" multiple
style="margin-bottom: 0; width: 100%; overflow-x: auto;" class="rules-select-data rules-allow" style="margin-bottom: 0; width: 100%; overflow-x: auto;" class="rules-select-data rules-allow"
></select> ></select>
@ -25,19 +25,19 @@ $seed = rand();
<button <button
class="btn" class="btn"
type="button" type="button"
title="<?= __('Move %s to the list of %s to allow', $scopeI18n, Inflector::pluralize($scopeI18n));?>" title="<?= __('Move %s to the list of %s to allow', h($scopeI18n), Inflector::pluralize(h($scopeI18n)));?>"
aria-label="<?= __('Move %s to the list of %s to allow', $scopeI18n, Inflector::pluralize($scopeI18n));?>" aria-label="<?= __('Move %s to the list of %s to allow', h($scopeI18n), Inflector::pluralize(h($scopeI18n)));?>"
role="button" tabindex="0" role="button" tabindex="0"
onClick="<?= sprintf("handleFreetextButtonClick('%s', this); ", 'rules-allow') ?>" onClick="<?= sprintf("handleFreetextButtonClick('%s', this); ", 'rules-allow') ?>"
> >
<i class="<?= $this->FontAwesome->getClass('caret-left') ?>"></i> <i class="<?= $this->FontAwesome->getClass('caret-left') ?>"></i>
</button> </button>
<input type="text" style="" placeholder="<?= sprintf('Freetext %s name', $scopeI18n) ?>"> <input type="text" style="" placeholder="<?= sprintf('Freetext %s name', h($scopeI18n)) ?>">
<button <button
class="btn" class="btn"
type="button" type="button"
title="<?= __('Move %s to the list of %s to block', $scopeI18n, Inflector::pluralize($scopeI18n));?>" title="<?= __('Move %s to the list of %s to block', h($scopeI18n), Inflector::pluralize(h($scopeI18n)));?>"
aria-label="<?= __('Move %s to the list of %s to block', $scopeI18n, Inflector::pluralize($scopeI18n));?>" aria-label="<?= __('Move %s to the list of %s to block', h($scopeI18n), Inflector::pluralize(h($scopeI18n)));?>"
role="button" tabindex="0" role="button" tabindex="0"
onClick="<?= sprintf("handleFreetextButtonClick('%s', this); ", 'rules-block') ?>" onClick="<?= sprintf("handleFreetextButtonClick('%s', this); ", 'rules-block') ?>"
> >
@ -49,17 +49,17 @@ $seed = rand();
<button <button
class="btn" class="btn"
type="button" type="button"
title="<?= __('Move %s to the list of %s to allow', $scopeI18n, Inflector::pluralize($scopeI18n));?>" title="<?= __('Move %s to the list of %s to allow', h($scopeI18n), Inflector::pluralize(h($scopeI18n)));?>"
aria-label="<?= __('Move %s to the list of %s to allow', $scopeI18n, Inflector::pluralize($scopeI18n));?>" aria-label="<?= __('Move %s to the list of %s to allow', h($scopeI18n), Inflector::pluralize(h($scopeI18n)));?>"
role="button" tabindex="0" role="button" tabindex="0"
onClick="<?= sprintf("handlePickerButtonClick('%s', this); ", 'rules-allow') ?>" onClick="<?= sprintf("handlePickerButtonClick('%s', this); ", 'rules-allow') ?>"
> >
<i class="<?= $this->FontAwesome->getClass('caret-left') ?>"></i> <i class="<?= $this->FontAwesome->getClass('caret-left') ?>"></i>
</button> </button>
<select <select
class="rules-select-picker rules-select-picker-<?= $scope ?>" class="rules-select-picker rules-select-picker-<?= h($scope) ?>"
multiple multiple
placeholder="<?= sprintf('%s name', $scopeI18n) ?>" placeholder="<?= sprintf('%s name', h($scopeI18n)) ?>"
> >
<?php foreach($options as $option): ?> <?php foreach($options as $option): ?>
<?php if(is_array($option)): ?> <?php if(is_array($option)): ?>
@ -72,8 +72,8 @@ $seed = rand();
<button <button
class="btn" class="btn"
type="button" type="button"
title="<?= __('Move %s to the list of %s to block', $scopeI18n, Inflector::pluralize($scopeI18n));?>" title="<?= __('Move %s to the list of %s to block', h($scopeI18n), Inflector::pluralize(h($scopeI18n)));?>"
aria-label="<?= __('Move %s to the list of %s to block', $scopeI18n, Inflector::pluralize($scopeI18n));?>" aria-label="<?= __('Move %s to the list of %s to block', h($scopeI18n), Inflector::pluralize(h($scopeI18n)));?>"
role="button" tabindex="0" role="button" tabindex="0"
onClick="<?= sprintf("handlePickerButtonClick('%s', this); ", 'rules-block') ?>" onClick="<?= sprintf("handlePickerButtonClick('%s', this); ", 'rules-block') ?>"
> >
@ -85,7 +85,7 @@ $seed = rand();
</div> </div>
<div style="flex-grow: 1;"> <div style="flex-grow: 1;">
<div class="bold red" style="display: flex; align-items: center;"> <div class="bold red" style="display: flex; align-items: center;">
<?php echo __('Blocked %s (AND NOT)', Inflector::pluralize($scopeI18n));?> <?php echo __('Blocked %s (AND NOT)', Inflector::pluralize(h($scopeI18n)));?>
<i <i
class="useCursorPointer <?= $this->FontAwesome->getClass('trash') ?>" class="useCursorPointer <?= $this->FontAwesome->getClass('trash') ?>"
style="margin-left: auto;" style="margin-left: auto;"
@ -94,7 +94,7 @@ $seed = rand();
></i> ></i>
</div> </div>
<select <select
id="<?= sprintf('%s%sRightValues', Inflector::pluralize($scope), $technique) ?>" id="<?= sprintf('%s%sRightValues', Inflector::pluralize(h($scope)), h($technique)) ?>"
size="6" multiple size="6" multiple
style="margin-bottom: 0; width: 100%; overflow-x: auto;" class="rules-select-data rules-block" style="margin-bottom: 0; width: 100%; overflow-x: auto;" class="rules-select-data rules-block"
></select> ></select>