Sfoglia il codice sorgente

Fix double encoding for mark as read a search (#1945)

* Fix double encoding for mark as read a search

Fix https://github.com/FreshRSS/FreshRSS/issues/1944

* Fix more search encoding issues
Alexandre Alapetite 7 anni fa
parent
commit
c4903bc8db

+ 2 - 1
app/layout/header.phtml

@@ -25,7 +25,8 @@ if (FreshRSS_Auth::accessNeedsAction()) {
 		<?php if (FreshRSS_Auth::hasAccess() || FreshRSS_Context::$system_conf->allow_anonymous) { ?>
 		<?php if (FreshRSS_Auth::hasAccess() || FreshRSS_Context::$system_conf->allow_anonymous) { ?>
 		<form action="<?php echo _url('index', 'index'); ?>" method="get">
 		<form action="<?php echo _url('index', 'index'); ?>" method="get">
 			<div class="stick">
 			<div class="stick">
-				<input type="search" name="search" id="search" class="extend" value="<?php echo FreshRSS_Context::$search; ?>" placeholder="<?php echo _t('gen.menu.search'); ?>" />
+				<input type="search" name="search" id="search" class="extend" value="<?php
+					echo htmlspecialchars(htmlspecialchars_decode(FreshRSS_Context::$search), ENT_COMPAT, 'UTF-8'); ?>" placeholder="<?php echo _t('gen.menu.search'); ?>" />
 
 
 				<?php $get = Minz_Request::param('get', ''); ?>
 				<?php $get = Minz_Request::param('get', ''); ?>
 				<?php if ($get != '') { ?>
 				<?php if ($get != '') { ?>

+ 3 - 2
app/layout/nav_menu.phtml

@@ -75,7 +75,7 @@
 				'get' => $get,
 				'get' => $get,
 				'nextGet' => FreshRSS_Context::$next_get,
 				'nextGet' => FreshRSS_Context::$next_get,
 				'idMax' => FreshRSS_Context::$id_max,
 				'idMax' => FreshRSS_Context::$id_max,
-				'search' => FreshRSS_Context::$search,
+				'search' => htmlspecialchars_decode(FreshRSS_Context::$search, ENT_QUOTES),
 				'state' => FreshRSS_Context::$state,
 				'state' => FreshRSS_Context::$state,
 			)
 			)
 		);
 		);
@@ -162,7 +162,8 @@
 
 
 	<div class="item search">
 	<div class="item search">
 		<form action="<?php echo _url('index', 'index'); ?>" method="get">
 		<form action="<?php echo _url('index', 'index'); ?>" method="get">
-			<input type="search" name="search" class="extend" value="<?php echo FreshRSS_Context::$search; ?>" placeholder="<?php echo _t('index.menu.search_short'); ?>" />
+			<input type="search" name="search" class="extend" value="<?php
+				echo htmlspecialchars(htmlspecialchars_decode(FreshRSS_Context::$search), ENT_COMPAT, 'UTF-8'); ?>" placeholder="<?php echo _t('index.menu.search_short'); ?>" />
 
 
 			<?php $get = Minz_Request::param('get', ''); ?>
 			<?php $get = Minz_Request::param('get', ''); ?>
 			<?php if($get != '') { ?>
 			<?php if($get != '') { ?>

+ 1 - 1
app/views/helpers/pagination.phtml

@@ -11,7 +11,7 @@
 			'get' => FreshRSS_Context::currentGet(),
 			'get' => FreshRSS_Context::currentGet(),
 			'nextGet' => FreshRSS_Context::$next_get,
 			'nextGet' => FreshRSS_Context::$next_get,
 			'idMax' => FreshRSS_Context::$id_max,
 			'idMax' => FreshRSS_Context::$id_max,
-			'search' => FreshRSS_Context::$search,
+			'search' => htmlspecialchars_decode(FreshRSS_Context::$search, ENT_QUOTES),
 			'state' => FreshRSS_Context::$state,
 			'state' => FreshRSS_Context::$state,
 		)
 		)
 	);
 	);