]> source.dussan.org Git - nextcloud-server.git/commitdiff
fix: use print_escaped for radio button "checked"
authorideaship <ideaship@users.noreply.github.com>
Thu, 6 Mar 2014 15:03:00 +0000 (16:03 +0100)
committerideaship <ideaship@users.noreply.github.com>
Thu, 6 Mar 2014 15:03:00 +0000 (16:03 +0100)
use of p() results in escaped HTML code: checked=&quot;checked&quot;
where it should be: checked="checked"

core/templates/installation.php

index e2d296a713f2f52c7373049570a8c3773e9708f3..709207e79772491edcdbee50bae31ae2a4439abb 100644 (file)
@@ -95,7 +95,7 @@
                <input type="hidden" id="dbtype" name="dbtype" value="<?php p($type) ?>" />
                <?php else: ?>
                <input type="radio" name="dbtype" value="<?php p($type) ?>" id="<?php p($type) ?>"
-                       <?php p($_['dbtype'] === $type ? 'checked="checked" ' : '') ?>/>
+                       <?php print_unescaped($_['dbtype'] === $type ? 'checked="checked" ' : '') ?>/>
                <label class="<?php p($type) ?>" for="<?php p($type) ?>"><?php p($label) ?></label>
                <?php endif; ?>
                <?php endforeach; ?>