lainwir3d/dolibarr
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fix escape

Browse Source
This commit is contained in:
Laurent Destailleur 2021-06-01 00:05:43 +02:00
parent 2dc9ca334f
commit 9d44df8a64
1 changed files with 11 additions and 11 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

22
htdocs/societe/list.php
View File

@ -1405,7 +1405,7 @@ while ($i < min($num, $limit)) {
} }
if (!empty($arrayfields['s.name_alias']['checked'])) { if (!empty($arrayfields['s.name_alias']['checked'])) {
print '<td class="tdoverflowmax200">'; print '<td class="tdoverflowmax200">';
print $companystatic->name_alias; print dol_escape_htmltag($companystatic->name_alias);
print "</td>\n"; print "</td>\n";
if (!$i) { if (!$i) {
$totalarray['nbfield']++; $totalarray['nbfield']++;
@ -1413,70 +1413,70 @@ while ($i < min($num, $limit)) {
} }
// Barcode // Barcode
if (!empty($arrayfields['s.barcode']['checked'])) { if (!empty($arrayfields['s.barcode']['checked'])) {
print '<td>'.$obj->barcode.'</td>'; print '<td>'.dol_escape_htmltag($obj->barcode).'</td>';
if (!$i) { if (!$i) {
$totalarray['nbfield']++; $totalarray['nbfield']++;
} }
} }
// Customer code // Customer code
if (!empty($arrayfields['s.code_client']['checked'])) { if (!empty($arrayfields['s.code_client']['checked'])) {
print '<td class="nowraponall">'.$obj->code_client.'</td>'; print '<td class="nowraponall">'.dol_escape_htmltag($obj->code_client).'</td>';
if (!$i) { if (!$i) {
$totalarray['nbfield']++; $totalarray['nbfield']++;
} }
} }
// Supplier code // Supplier code
if (!empty($arrayfields['s.code_fournisseur']['checked'])) { if (!empty($arrayfields['s.code_fournisseur']['checked'])) {
print '<td class="nowraponall">'.$obj->code_fournisseur.'</td>'; print '<td class="nowraponall">'.dol_escape_htmltag($obj->code_fournisseur).'</td>';
if (!$i) { if (!$i) {
$totalarray['nbfield']++; $totalarray['nbfield']++;
} }
} }
// Account customer code // Account customer code
if (!empty($arrayfields['s.code_compta']['checked'])) { if (!empty($arrayfields['s.code_compta']['checked'])) {
print '<td>'.$obj->code_compta.'</td>'; print '<td>'.dol_escape_htmltag($obj->code_compta).'</td>';
if (!$i) { if (!$i) {
$totalarray['nbfield']++; $totalarray['nbfield']++;
} }
} }
// Account supplier code // Account supplier code
if (!empty($arrayfields['s.code_compta_fournisseur']['checked'])) { if (!empty($arrayfields['s.code_compta_fournisseur']['checked'])) {
print '<td>'.$obj->code_compta_fournisseur.'</td>'; print '<td>'.dol_escape_htmltag($obj->code_compta_fournisseur).'</td>';
if (!$i) { if (!$i) {
$totalarray['nbfield']++; $totalarray['nbfield']++;
} }
} }
// Address // Address
if (!empty($arrayfields['s.address']['checked'])) { if (!empty($arrayfields['s.address']['checked'])) {
print '<td>'.$obj->address.'</td>'; print '<td>'.dol_escape_htmltag($obj->address).'</td>';
if (!$i) { if (!$i) {
$totalarray['nbfield']++; $totalarray['nbfield']++;
} }
} }
// Zip // Zip
if (!empty($arrayfields['s.zip']['checked'])) { if (!empty($arrayfields['s.zip']['checked'])) {
print "<td>".$obj->zip."</td>\n"; print "<td>".dol_escape_htmltag($obj->zip)."</td>\n";
if (!$i) { if (!$i) {
$totalarray['nbfield']++; $totalarray['nbfield']++;
} }
} }
// Town // Town
if (!empty($arrayfields['s.town']['checked'])) { if (!empty($arrayfields['s.town']['checked'])) {
print "<td>".$obj->town."</td>\n"; print '<td class="tdoverflowmax150" title="'.dol_escape_htmltag($obj->town).'">'.dol_escape_htmltag($obj->town)."</td>\n";
if (!$i) { if (!$i) {
$totalarray['nbfield']++; $totalarray['nbfield']++;
} }
} }
// State // State
if (!empty($arrayfields['state.nom']['checked'])) { if (!empty($arrayfields['state.nom']['checked'])) {
print "<td>".$obj->state_name."</td>\n"; print "<td>".dol_escape_htmltag($obj->state_name)."</td>\n";
if (!$i) { if (!$i) {
$totalarray['nbfield']++; $totalarray['nbfield']++;
} }
} }
// Region // Region
if (!empty($arrayfields['region.nom']['checked'])) { if (!empty($arrayfields['region.nom']['checked'])) {
print "<td>".$obj->region_name."</td>\n"; print "<td>".dol_escape_htmltag($obj->region_name)."</td>\n";
if (!$i) { if (!$i) {
$totalarray['nbfield']++; $totalarray['nbfield']++;
} }