| commit | ea4f9e1cdfdc153af0164d58dfa7f5eb3af6238e | |
| author | bradymiller <bradymiller@users.sourceforge.net> | |
| Sat, 12 Mar 2011 21:55:45 +0000 (12 13:55 -0800) | ||
| committer | bradymiller <bradymiller@users.sourceforge.net> | |
| Sat, 19 Mar 2011 03:12:59 +0000 (18 20:12 -0700) | ||
| tree | 8882ed46bd7e7c013662c149cb803b8558dfc788 | treesnapshot (tar.gz zip) |
| parent | cf3daed5ca94909fc446f3569b3bc8ffee7d041f | commitdiff |
Quick bug fix: Escaping of a string literal within an onClick tag.
Pretty tough fix. For some reason, it works if run through addslashes()
and htmlspecialchars(). Pretty weird. We should avoid ever displaying
javascript code that needs to be escaped if within the onClick tag to
avoid this situation.
Further discussed here:
http://stackoverflow.com/questions/97578/how-do-i-escape-a-string-inside-javascript-inside-an-onclick-handler
Pretty tough fix. For some reason, it works if run through addslashes()
and htmlspecialchars(). Pretty weird. We should avoid ever displaying
javascript code that needs to be escaped if within the onClick tag to
avoid this situation.
Further discussed here:
http://stackoverflow.com/questions/97578/how-do-i-escape-a-string-inside-javascript-inside-an-onclick-handler
| library/ajax/payment_ajax.php | diffblobblamehistory |