diff options
| author | lpsolit%gmail.com <> | 2006-10-15 05:48:47 +0200 |
|---|---|---|
| committer | lpsolit%gmail.com <> | 2006-10-15 05:48:47 +0200 |
| commit | b0ddda44bee03e94f04368dd68e8c0784de4a945 (patch) | |
| tree | a1df1928c46bbe1b99cb06bad981dc69c13bc65d /template/en/default/admin | |
| parent | b1ef63e5bfc0d3995245b42154686db1400b2c22 (diff) | |
| download | bugzilla-b0ddda44bee03e94f04368dd68e8c0784de4a945.tar.gz bugzilla-b0ddda44bee03e94f04368dd68e8c0784de4a945.tar.xz | |
Bug 330555: [SECURITY] H1, H2 and H3 are not filtered in global/header.html.tmpl - Patch by Frédéric Buclin <LpSolit@gmail.com> r=justdave a=justdave
Diffstat (limited to 'template/en/default/admin')
5 files changed, 16 insertions, 9 deletions
diff --git a/template/en/default/admin/flag-type/edit.html.tmpl b/template/en/default/admin/flag-type/edit.html.tmpl index b7ff82949..942fb3b09 100644 --- a/template/en/default/admin/flag-type/edit.html.tmpl +++ b/template/en/default/admin/flag-type/edit.html.tmpl @@ -35,9 +35,9 @@ [% END %] [% IF last_action == "copy" %] - [% title = "Create Flag Type Based on $type.name" %] + [% title = BLOCK %]Create Flag Type Based on [% type.name FILTER html %][% END %] [% ELSIF last_action == "edit" %] - [% title = "Edit Flag Type $type.name" %] + [% title = BLOCK %]Edit Flag Type [% type.name FILTER html %][% END %] [% END %] [% PROCESS global/header.html.tmpl diff --git a/template/en/default/admin/groups/edit.html.tmpl b/template/en/default/admin/groups/edit.html.tmpl index a66e78fde..c1d032e1a 100644 --- a/template/en/default/admin/groups/edit.html.tmpl +++ b/template/en/default/admin/groups/edit.html.tmpl @@ -41,9 +41,10 @@ # be aware of the group being edited and its members. #%] +[% title = BLOCK %]Change Group: [% name FILTER html %][% END %] [% PROCESS global/header.html.tmpl - title = "Change Group: $name" + title = title style = "tr.odd_row { background: #e9e9e9; } diff --git a/template/en/default/admin/groups/remove.html.tmpl b/template/en/default/admin/groups/remove.html.tmpl index 0eed2d9fb..8c41333e4 100644 --- a/template/en/default/admin/groups/remove.html.tmpl +++ b/template/en/default/admin/groups/remove.html.tmpl @@ -33,11 +33,13 @@ [% IF remove_all %] - [% title = "Removing All Explicit Group Memberships from '" - _ name _ "'" %] + [% title = BLOCK %] + Removing All Explicit Group Memberships from '[% name FILTER html %]' + [% END %] [% ELSE %] - [% title = "Removing All Explicit Group Memberships Matching " - _ "Group RegExp from '" _ name _ "'" %] + [% title = BLOCK %] + Removing All Explicit Group Memberships Matching Group RegExp from '[% name FILTER html %]' + [% END %] [% END %] [% PROCESS global/header.html.tmpl %] diff --git a/template/en/default/admin/users/confirm-delete.html.tmpl b/template/en/default/admin/users/confirm-delete.html.tmpl index 02efdb82a..6f0a565ca 100644 --- a/template/en/default/admin/users/confirm-delete.html.tmpl +++ b/template/en/default/admin/users/confirm-delete.html.tmpl @@ -44,8 +44,10 @@ # created #%] +[% title = BLOCK %]Confirm deletion of user [% otheruser.login FILTER html %][% END %] + [% PROCESS global/header.html.tmpl - title = "Confirm deletion of user $otheruser.login" + title = title style_urls = ['skins/standard/admin.css', 'skins/standard/editusers.css'] %] diff --git a/template/en/default/admin/users/edit.html.tmpl b/template/en/default/admin/users/edit.html.tmpl index c35bb691f..b0cc21082 100644 --- a/template/en/default/admin/users/edit.html.tmpl +++ b/template/en/default/admin/users/edit.html.tmpl @@ -25,8 +25,10 @@ # canbless) for viewed user. #%] +[% title = BLOCK %]Edit user [% otheruser.login FILTER html %][% END %] + [% PROCESS global/header.html.tmpl - title = "Edit user $login" + title = title message = message style_urls = ['skins/standard/editusers.css'] %] |