X-Git-Url: https://vcs.fsf.org/?p=squirrelmail.git;a=blobdiff_plain;f=class%2Ftemplate%2FPHP_Template.class.php;h=ec108b296c85b4e1f4230e3ad84b264027acf92d;hp=7bf3e236d110418824cd23a850ee657d0e8b0295;hb=69e110f3320c698f8ecc5a7f34ea9fac1caf3c39;hpb=c0d968010e710870fdfee2f22d7cc9fad370c7a9 diff --git a/class/template/PHP_Template.class.php b/class/template/PHP_Template.class.php index 7bf3e236..ec108b29 100644 --- a/class/template/PHP_Template.class.php +++ b/class/template/PHP_Template.class.php @@ -9,7 +9,7 @@ * The SquirrelMail (Foowd) template implementation. * Derived from the foowd template implementation and adapted * for squirrelmail - * @copyright 2005-2012 The SquirrelMail Project Team + * @copyright 2005-2017 The SquirrelMail Project Team * @license http://opensource.org/licenses/gpl-license.php GNU Public License * @version $Id$ * @package squirrelmail @@ -65,7 +65,7 @@ class PHP_Template extends Template * @param mixed $value the value to assign FIXME: Proposed idea to add a parameter here that turns variable encoding on, so that we can make sure output is always - run through something like htmlspecialchars() (maybe even nl2br()?) + run through something like sm_encode_html_special_chars() (maybe even nl2br()?) * */ function assign($tpl_var, $value = NULL) { @@ -93,7 +93,7 @@ FIXME: Proposed idea to add a parameter here that turns variable * @param mixed $value the referenced value to assign FIXME: Proposed idea to add a parameter here that turns variable encoding on, so that we can make sure output is always - run through something like htmlspecialchars() (maybe even nl2br()?) + run through something like sm_encode_html_special_chars() (maybe even nl2br()?) * */ function assign_by_ref($tpl_var, &$value) { @@ -159,7 +159,7 @@ FIXME: Proposed idea to add a parameter here that turns variable * variable values FIXME: Proposed idea to add a parameter here that turns variable encoding on, so that we can make sure output is always - run through something like htmlspecialchars() (maybe even nl2br()?) + run through something like sm_encode_html_special_chars() (maybe even nl2br()?) * */ function append($tpl_var, $value = NULL, $merge = FALSE) @@ -220,7 +220,7 @@ FIXME: Proposed idea to add a parameter here that turns variable * variable values FIXME: Proposed idea to add a parameter here that turns variable encoding on, so that we can make sure output is always - run through something like htmlspecialchars() (maybe even nl2br()?) + run through something like sm_encode_html_special_chars() (maybe even nl2br()?) * */ function append_by_ref($tpl_var, &$value, $merge = FALSE)