Convert AphrontPanelView to safe HTML (except children)

Summary: Fixes some double escaping and potential XSS.

Test Plan: Looked at homepage.

Reviewers: epriestley

Reviewed By: epriestley

CC: aran, Korvin

Maniphest Tasks: T2432

Differential Revision: https://secure.phabricator.com/D4917
This commit is contained in:
vrana
2013-02-11 21:25:39 -08:00
parent 80fb84bd94
commit 5ad526942b
10 changed files with 24 additions and 25 deletions

View File

@@ -143,8 +143,7 @@ extends PhabricatorAuthController {
// display time -- make a nice form for the user to grant the client
// access to the granularity specified by $scope
$name = phutil_escape_html($client->getName());
$title = 'Authorize ' . $name . '?';
$title = 'Authorize '.$client->getName().'?';
$panel = new AphrontPanelView();
$panel->setWidth(AphrontPanelView::WIDTH_FORM);
$panel->setHeader($title);