Escaping some forgotten vars in create_poll

This commit is contained in:
Antonin 2016-05-02 17:44:43 +02:00
parent f4aa091b80
commit d26dae1298

View File

@ -22,7 +22,7 @@
<div class="col-sm-8"> <div class="col-sm-8">
<input id="poll_title" type="text" name="title" class="form-control" {$errors['title']['aria']} <input id="poll_title" type="text" name="title" class="form-control" {$errors['title']['aria']}
value="{$poll_title}"/> value="{$poll_title|html}"/>
</div> </div>
</div> </div>
{if !empty($errors['title']['msg'])} {if !empty($errors['title']['msg'])}
@ -63,7 +63,7 @@
<div class="col-sm-8"> <div class="col-sm-8">
<textarea id="poll_comments" name="description" <textarea id="poll_comments" name="description"
class="form-control" {$errors['description']['aria']} class="form-control" {$errors['description']['aria']}
rows="5">{$poll_description}</textarea> rows="5">{$poll_description|html}</textarea>
</div> </div>
</div> </div>
{if !empty($errors['description']['msg'])} {if !empty($errors['description']['msg'])}
@ -81,7 +81,7 @@
{if $useRemoteUser} {if $useRemoteUser}
<input type="hidden" name="name" value="{$form->admin_name}" />{$form->admin_name} <input type="hidden" name="name" value="{$form->admin_name}" />{$form->admin_name}
{else} {else}
<input id="yourname" type="text" name="name" class="form-control" {$errors['name']['aria']} value="{$poll_name}" /> <input id="yourname" type="text" name="name" class="form-control" {$errors['name']['aria']} value="{$poll_name|html}" />
{/if} {/if}
</div> </div>
</div> </div>