diff options
| author | Frédéric Guillot <contact@fredericguillot.com> | 2014-02-24 18:29:09 -0500 |
|---|---|---|
| committer | Frédéric Guillot <contact@fredericguillot.com> | 2014-02-24 18:29:09 -0500 |
| commit | 8159cc99a64cfe563dccea6821348764fc40fb85 (patch) | |
| tree | 9904848c2d517ff8e5a28e47d31aa17e7cfd9c70 /templates/config_index.php | |
| parent | 64e2e072294563b7c834382c2de631687f235fe8 (diff) | |
Improve HTML escaping
Diffstat (limited to 'templates/config_index.php')
| -rw-r--r-- | templates/config_index.php | 9 |
1 files changed, 6 insertions, 3 deletions
diff --git a/templates/config_index.php b/templates/config_index.php index 5012538a..d94ee8b9 100644 --- a/templates/config_index.php +++ b/templates/config_index.php @@ -27,7 +27,10 @@ <?= t('Webhooks token:') ?> <strong><?= Helper\escape($values['webhooks_token']) ?></strong> </li> - <li><?= t('Database size:') ?> <strong><?= Helper\format_bytes($db_size) ?></strong></li> + <li> + <?= t('Database size:') ?> + <strong><?= Helper\format_bytes($db_size) ?></strong> + </li> <li> <a href="?controller=config&action=downloadDb"><?= t('Download the database') ?></a> <?= t('(Gzip compressed Sqlite file)') ?> @@ -38,7 +41,7 @@ </li> <li> <?= t('Official website:') ?> - <a href="http://kanboard.net/" target="_blank">http://kanboard.net/</a> + <a href="http://kanboard.net/" target="_blank" rel="noreferer">http://kanboard.net/</a> </li> <li> <?= t('Application version:') ?> @@ -55,7 +58,7 @@ <ul> <li> <strong><?= t('My default project:') ?> </strong> - <?= (isset($user['default_project_id']) && isset($projects[$user['default_project_id']])) ? $projects[$user['default_project_id']] : t('None') ?>, + <?= (isset($user['default_project_id']) && isset($projects[$user['default_project_id']])) ? Helper\escape($projects[$user['default_project_id']]) : t('None') ?>, <a href="?controller=user&action=edit&user_id=<?= $user['id'] ?>"><?= t('edit') ?></a> </li> </ul> |