mirror/php-e107
1
0
Fork 0
mirror of https://github.com/e107inc/e107.git synced 2025-08-01 20:30:39 +02:00
Code Issues Releases Wiki Activity

show_emessage("ALERT", …): JSON type enforcement for alert() usages

Browse Source
This commit is contained in:
Nick Liu
2021-08-07 18:50:14 +02:00
parent fe8ae40f30
commit ecf6ab7acc
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
e107_handlers/message_handler.php
View File

@@ -1152,11 +1152,11 @@ $SYSTEM_DIRECTORY = "e107_system/";</pre>
case "ALERT":
$message = isset($emessage[$message]) ? $emessage[$message] : $message;
echo "<noscript>$message</noscript><script type='text/javascript'>alert(\"".$tp->toJS($message)."\"); window.history.go(-1); </script>\n"; exit;
echo "<noscript>$message</noscript><script type='text/javascript'>alert(".json_encode($message)."); window.history.go(-1); </script>\n"; exit;
break;
case "P_ALERT":
echo "<script type='text/javascript'>alert(\"".$tp->toJS($message)."\"); </script>\n";
echo "<script type='text/javascript'>alert(".json_encode($message)."); </script>\n";
break;
case 'POPUP':