URI and HTML escape template variables
This commit is contained in:
		| @@ -14,15 +14,14 @@ | ||||
|   </tbody> | ||||
|     [% WHILE (row = results.next) %] | ||||
|     <tr> | ||||
|       <td><a href="[% uri_for('/device') %]?q=[% row.dns || row.ip %]">[% row.dns || row.ip %]</a></td> | ||||
|       <td>[% row.contact %]</td> | ||||
|       <td>[% row.location %]</td> | ||||
|       <td>[% row.name %]</td> | ||||
|       <!-- <td>[% row.description.substr(0, 100) %][% ' …' IF row.description.length > 100 %]</td> --> | ||||
|       <td>[% row.model %]</td> | ||||
|       <td>[% row.os_ver %]</td> | ||||
|       <td>[% row.ip %]</td> | ||||
|       <td>[% row.serial %]</td> | ||||
|       <td><a href="[% uri_for('/device') %]?q=[% row.dns || row.ip | uri %]">[% row.dns || row.ip | html_entity %]</a></td> | ||||
|       <td>[% row.contact | html_entity %]</td> | ||||
|       <td>[% row.location | html_entity %]</td> | ||||
|       <td>[% row.name | html_entity %]</td> | ||||
|       <td>[% row.model | html_entity %]</td> | ||||
|       <td>[% row.os_ver | html_entity %]</td> | ||||
|       <td>[% row.ip | html_entity %]</td> | ||||
|       <td>[% row.serial | html_entity %]</td> | ||||
|     </tr> | ||||
|     [% END %] | ||||
|   </tbody> | ||||
|   | ||||
		Reference in New Issue
	
	Block a user