TPS
/
ORIENT
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Vars passed to content should be escaped

This commit is contained in:
Samuel Georges 2015-04-25 14:28:52 +10:00
parent ab1272bea9
commit 0083fcd356
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
modules/cms/twig/ContentNode.php
View File

@ -30,7 +30,9 @@ class ContentNode extends Twig_Node
for ($i = 1; $i < count($this->getNode('nodes')); $i++) {
$compiler->write("\$context['__cms_content_params']['".$this->getAttribute('names')[$i-1]."'] = ");
$compiler->write('twig_escape_filter($this->env, ');
$compiler->subcompile($this->getNode('nodes')->getNode($i));
$compiler->write(")");
$compiler->write(";\n");
}