From ce428db89f1f3ac5ff1b9b519522aa4701c9c4ad Mon Sep 17 00:00:00 2001
From: xue <>
Date: Sat, 31 Mar 2007 13:40:02 +0000
Subject: Fixed #566

---
 HISTORY                               | 1 +
 framework/Web/UI/TTemplateManager.php | 2 +-
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/HISTORY b/HISTORY
index 1d360b86..54ea4332 100644
--- a/HISTORY
+++ b/HISTORY
@@ -14,6 +14,7 @@ BUG: Ticket#553 - I18N quickstart sample does not work (Qiang)
 BUG: Ticket#555 - TNumberFormat throws exception (Qiang)
 BUG: Ticket#557 - TAutoComplete is not fool-proof (Wei)
 BUG: Ticket#560 - TActiveImageButton broken (Postback instead of Callback) (Wei)
+BUG: Ticket#566 - <%[ tags (localize tags) missing escaping (Qiang)
 BUG: Ticket#573 - NumberFormat Bug (Wei)
 BUG: Ticket#579 - The rating list lost its Javascript in changeset [1775] (Wei).
 BUG: TXmlElement did not encode attribute and text values when being saved as a string (Qiang)
diff --git a/framework/Web/UI/TTemplateManager.php b/framework/Web/UI/TTemplateManager.php
index a68b4c51..d71662ca 100644
--- a/framework/Web/UI/TTemplateManager.php
+++ b/framework/Web/UI/TTemplateManager.php
@@ -655,7 +655,7 @@ class TTemplate extends TApplicationComponent implements ITemplate
 						$tpl[$c++]=array($container,array(TCompositeLiteral::TYPE_EXPRESSION,"\$this->publishFilePath('$this->_contextPath/$literal')"));
 					else if($str[2]==='[')
 					{
-						$literal=trim(substr($literal,0,strlen($literal)-1));
+						$literal=strtr(trim(substr($literal,0,strlen($literal)-1)),array("'"=>"\'","\\"=>"\\\\"));
 						$tpl[$c++]=array($container,array(TCompositeLiteral::TYPE_EXPRESSION,"Prado::localize('$literal')"));
 					}
 				}
-- 
cgit v1.2.3