Changeset 126 in bookmarks

Timestamp:

07/15/16 16:36:51 (8 years ago)

Author:

peter

Message:

HTML-escape the bookmark resource title or URI in the list display.

File:

• trunk/lib/Bookmarks/list_core.tt (modified) (1 diff)

trunk/lib/Bookmarks/list_core.tt

@@ -5 +5 @@
         (<a href="[% resource.id %]" class="edit-bookmark">Edit</a>)
       </span>
-      <a href="[% resource.uri | html %]" title="[% resource.title | html %] ([% resource.tags.join(', ') %])">[% resource.title or resource.uri %]</a>
+      <a href="[% resource.uri | html %]" title="[% resource.title | html %] ([% resource.tags.join(', ') %])">[% ( resource.title or resource.uri ) | html %]</a>
       <div class="tags">
         [% FOREACH tag IN resource.tags %]