Fix escape

This commit is contained in:
Laurent Destailleur 2021-06-01 00:05:43 +02:00
parent 2dc9ca334f
commit 9d44df8a64

View File

@ -1405,7 +1405,7 @@ while ($i < min($num, $limit)) {
}
if (!empty($arrayfields['s.name_alias']['checked'])) {
print '<td class="tdoverflowmax200">';
print $companystatic->name_alias;
print dol_escape_htmltag($companystatic->name_alias);
print "</td>\n";
if (!$i) {
$totalarray['nbfield']++;
@ -1413,70 +1413,70 @@ while ($i < min($num, $limit)) {
}
// Barcode
if (!empty($arrayfields['s.barcode']['checked'])) {
print '<td>'.$obj->barcode.'</td>';
print '<td>'.dol_escape_htmltag($obj->barcode).'</td>';
if (!$i) {
$totalarray['nbfield']++;
}
}
// Customer code
if (!empty($arrayfields['s.code_client']['checked'])) {
print '<td class="nowraponall">'.$obj->code_client.'</td>';
print '<td class="nowraponall">'.dol_escape_htmltag($obj->code_client).'</td>';
if (!$i) {
$totalarray['nbfield']++;
}
}
// Supplier code
if (!empty($arrayfields['s.code_fournisseur']['checked'])) {
print '<td class="nowraponall">'.$obj->code_fournisseur.'</td>';
print '<td class="nowraponall">'.dol_escape_htmltag($obj->code_fournisseur).'</td>';
if (!$i) {
$totalarray['nbfield']++;
}
}
// Account customer code
if (!empty($arrayfields['s.code_compta']['checked'])) {
print '<td>'.$obj->code_compta.'</td>';
print '<td>'.dol_escape_htmltag($obj->code_compta).'</td>';
if (!$i) {
$totalarray['nbfield']++;
}
}
// Account supplier code
if (!empty($arrayfields['s.code_compta_fournisseur']['checked'])) {
print '<td>'.$obj->code_compta_fournisseur.'</td>';
print '<td>'.dol_escape_htmltag($obj->code_compta_fournisseur).'</td>';
if (!$i) {
$totalarray['nbfield']++;
}
}
// Address
if (!empty($arrayfields['s.address']['checked'])) {
print '<td>'.$obj->address.'</td>';
print '<td>'.dol_escape_htmltag($obj->address).'</td>';
if (!$i) {
$totalarray['nbfield']++;
}
}
// Zip
if (!empty($arrayfields['s.zip']['checked'])) {
print "<td>".$obj->zip."</td>\n";
print "<td>".dol_escape_htmltag($obj->zip)."</td>\n";
if (!$i) {
$totalarray['nbfield']++;
}
}
// Town
if (!empty($arrayfields['s.town']['checked'])) {
print "<td>".$obj->town."</td>\n";
print '<td class="tdoverflowmax150" title="'.dol_escape_htmltag($obj->town).'">'.dol_escape_htmltag($obj->town)."</td>\n";
if (!$i) {
$totalarray['nbfield']++;
}
}
// State
if (!empty($arrayfields['state.nom']['checked'])) {
print "<td>".$obj->state_name."</td>\n";
print "<td>".dol_escape_htmltag($obj->state_name)."</td>\n";
if (!$i) {
$totalarray['nbfield']++;
}
}
// Region
if (!empty($arrayfields['region.nom']['checked'])) {
print "<td>".$obj->region_name."</td>\n";
print "<td>".dol_escape_htmltag($obj->region_name)."</td>\n";
if (!$i) {
$totalarray['nbfield']++;
}