* luci/libs: use striptags() in cbi <option> elements
This commit is contained in:
parent
ab71972c7e
commit
18dfd21c39
4 changed files with 6 additions and 5 deletions
|
@ -783,8 +783,9 @@ end
|
|||
function AbstractValue.render(self, s, scope)
|
||||
if not self.optional or self:cfgvalue(s) or self:formcreated(s) then
|
||||
scope = scope or {}
|
||||
scope.section = s
|
||||
scope.cbid = self:cbid(s)
|
||||
scope.section = s
|
||||
scope.cbid = self:cbid(s)
|
||||
scope.striptags = luci.util.striptags
|
||||
|
||||
scope.ifattr = function(cond,key,val)
|
||||
if cond then
|
||||
|
|
|
@ -16,7 +16,7 @@ $Id$
|
|||
<% if self.widget == "select" then %>
|
||||
<select onchange="cbi_d_update(this.id)"<%= attr("id", cbid) .. attr("name", cbid) .. ifattr(self.size, "size") %>>
|
||||
<% for i, key in pairs(self.keylist) do -%>
|
||||
<option id="cbi-<%=self.config.."-"..section.."-"..self.option.."-"..key%>"<%= attr("value", key) .. ifattr(self:cfgvalue(section) == key, "selected", "selected") %>><%=luci.util.pcdata(self.vallist[i])%></option>
|
||||
<option id="cbi-<%=self.config.."-"..section.."-"..self.option.."-"..key%>"<%= attr("value", key) .. ifattr(self:cfgvalue(section) == key, "selected", "selected") %>><%=striptags(self.vallist[i])%></option>
|
||||
<%- end %>
|
||||
</select>
|
||||
<% elseif self.widget == "radio" then
|
||||
|
|
|
@ -19,7 +19,7 @@ local v = self:valuelist(section)
|
|||
<% if self.widget == "select" then %>
|
||||
<select multiple="multiple"<%= attr("name", cbid) .. ifattr(self.size, "size") %>>
|
||||
<% for i, key in pairs(self.keylist) do -%>
|
||||
<option<%= attr("value", key) .. ifattr(luci.util.contains(v, key), "selected", "selected") %>><%=self.vallist[i]%></option>
|
||||
<option<%= attr("value", key) .. ifattr(luci.util.contains(v, key), "selected", "selected") %>><%=striptags(self.vallist[i])%></option>
|
||||
<%- end %>
|
||||
</select>
|
||||
<% elseif self.widget == "checkbox" then
|
||||
|
|
|
@ -23,7 +23,7 @@ $Id$
|
|||
<select name="cbi.opt.<%=self.config%>.<%=section%>">
|
||||
<option><%:cbi_addopt%></option>
|
||||
<% for key, val in pairs(self.optionals[section]) do -%>
|
||||
<option id="cbi-<%=self.config.."-"..section.."-"..val.option%>" value="<%=val.option%>"><%=val.title%></option>
|
||||
<option id="cbi-<%=self.config.."-"..section.."-"..val.option%>" value="<%=val.option%>"><%=striptags(val.title)%></option>
|
||||
<%- end %>
|
||||
</select>
|
||||
<script type="text/javascript"><% for key, val in pairs(self.optionals[section]) do %>
|
||||
|
|
Loading…
Reference in a new issue