Added object's DN escape in links's URL
authorBenjamin Renard <brenard@easter-eggs.com>
Thu, 3 May 2012 10:37:26 +0000 (12:37 +0200)
committerBenjamin Renard <brenard@easter-eggs.com>
Thu, 3 May 2012 10:37:26 +0000 (12:37 +0200)
public_html/templates/default/LSformElement_select_object_field.tpl

index 85e26b0..f132dd7 100644 (file)
@@ -1,5 +1,5 @@
 {if $dn}
-  <a href='view.php?LSobject={$selectableObject}&amp;dn={$dn}' class='LSformElement_select_object'>{$txt}</a>
+  <a href='view.php?LSobject={$selectableObject}&amp;dn={$dn|escape:'url'}' class='LSformElement_select_object'>{$txt}</a>
   {if !$freeze}<input type='hidden' class='LSformElement_select_object' name='{$attr_name}[]' value='{$dn}' />{/if}
 {else}
   {$noValueTxt}