Convert AphrontPanelView to safe HTML (except children)
Summary: Fixes some double escaping and potential XSS. Test Plan: Looked at homepage. Reviewers: epriestley Reviewed By: epriestley CC: aran, Korvin Maniphest Tasks: T2432 Differential Revision: https://secure.phabricator.com/D4917
This commit is contained in:
@@ -143,8 +143,7 @@ extends PhabricatorAuthController {
|
||||
|
||||
// display time -- make a nice form for the user to grant the client
|
||||
// access to the granularity specified by $scope
|
||||
$name = phutil_escape_html($client->getName());
|
||||
$title = 'Authorize ' . $name . '?';
|
||||
$title = 'Authorize '.$client->getName().'?';
|
||||
$panel = new AphrontPanelView();
|
||||
$panel->setWidth(AphrontPanelView::WIDTH_FORM);
|
||||
$panel->setHeader($title);
|
||||
|
||||
Reference in New Issue
Block a user