From 1917aabc92099ce07db1c89ec4c63c31e07df7c6 Mon Sep 17 00:00:00 2001
From: Carles Bellver <carles.bellver@gmail.com>
Date: Sat, 27 Aug 2005 13:35:36 +0200
Subject: [PATCH] addslashes for JavScript language strings
If you use a single quote (escaped with a slash, of
course) in strings 'notsavedyet' or 'qb_alert', then
the edit toolbar doesn't show in your edit pages.
This is caused by the way these strings are inserted
in javascript code in inc/template.php. This patch
fixes it.
darcs-hash:20050827113536-cc4ee-02805ca80c3cc3fedac65e908dae71af92f412f7.gz
---
inc/template.php | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/inc/template.php b/inc/template.php
index b033a82e0..4ce5041e9 100644
--- a/inc/template.php
+++ b/inc/template.php
@@ -204,8 +204,8 @@ function tpl_metaheaders(){
// include some JavaScript language strings
ptln('<script language="javascript" type="text/javascript" charset="utf-8">',$it);
- ptln(" var alertText = '".$lang['qb_alert']."'",$it);
- ptln(" var notSavedYet = '".$lang['notsavedyet']."'",$it);
+ ptln(" var alertText = '".addslashes($lang['qb_alert'])."'",$it);
+ ptln(" var notSavedYet = '".addslashes($lang['notsavedyet'])."'",$it);
ptln(" var DOKU_BASE = '".DOKU_BASE."'",$it);
ptln('</script>',$it);
--
GitLab