Allow options to use HTML in trailing text

[squirrelmail.git] / templates / default / options.tpl

diff --git a/templates/default/options.tpl b/templates/default/options.tpl
index 4df2682a11101934a24f42ee838281fccbe02dd5..2aef407a8ee20b12be2c6beee8f9d1cd869f5ec0 100644 (file)
--- a/templates/default/options.tpl
+++ b/templates/default/options.tpl
@@ -11,7 +11,7 @@
  *                       ['name']     - The name of the option group
  *                       ['options']  - array of squirrelOption objects
  *
- * @copyright 1999-2014 The SquirrelMail Project Team
+ * @copyright 1999-2017 The SquirrelMail Project Team
  * @license http://opensource.org/licenses/gpl-license.php GNU Public License
  * @version $Id$
  * @package squirrelmail
@@ -63,6 +63,7 @@ foreach ($option_groups as $option) {
 
             echo '<label for="new_' . $opt->name . '">' . $opt->caption;
             if ($opt->type == SMOPT_TYPE_TEXTAREA && !empty($opt->trailing_text)) {
+// TODO: Is trailing_text already sanitized here? (sm_encode_html_special_chars())  Either way, we want to have an option to sanitize or not depending on $opt->trailing_text_is_html ---- note that this question may already be taken care of in functions/options.php and irrelevant here, but I'm not sure about that yet.... after looking a little, it does appear this is a problem, though where to solve it is not clear
                 echo '<br /><small>' . $opt->trailing_text . '</small>';
             }
             echo '</label>';