Enforce escaping on all template content

2019-09-23 14:22:00 +01:00
parent 5f378a39ea
commit deb9b62c7f
77 changed files with 392 additions and 387 deletions
--- a/share/views/ajax/datatabledefaults.tt
+++ b/share/views/ajax/datatabledefaults.tt
@@ -1,8 +1,8 @@

    "processing": true
    ,"stateSave": true
-    ,"pageLength": [% settings.table_pagesize %]
-    ,"lengthMenu": [% table_showrecordsmenu %]
+    ,"pageLength": [% settings.table_pagesize | none %]
+    ,"lengthMenu": [% table_showrecordsmenu | none %]
    ,"dom": '<"top"l<"nd_datatables-pager"p>f>rit<"bottom"><"clear">'
    ,"language": {
      "search": '_INPUT_'