#2301 noescape 명시적 지정

xpressengine · Sep 27, 2018 · a61fe69 · a61fe69
1 parent f4bfdab
commit a61fe69
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/modules/communication/skins/default/send_message.html b/modules/communication/skins/default/send_message.html
@@ -25,7 +25,7 @@ <h1>{$lang->cmd_send_message}</h1>
 				<td><input type="checkbox" value="Y" name="send_mail" /> {$lang->cmd_send_mail}</td>
 			</tr>
 		</table>
-		{$editor}
+		{$editor|noescape}
 		<div class="btnArea">
 			<input type="submit" value="{$lang->cmd_send_message}" class="btn btn-inverse" />
 		</div>

diff --git a/modules/widget/tpl/add_content_widget.html b/modules/widget/tpl/add_content_widget.html
@@ -15,7 +15,7 @@ <h1>{$lang->cmd_content_insert}</h1>
 	</div>
 	<div class="x_modal-body">
 		<div class="pageAddContent"></div>
-		<div class="editor">{$editor}</div>
+		<div class="editor">{$editor|noescape}</div>
 		<script>xAddEventListener(window, 'load', doSyncPageContent);</script>
 	</div>
 	<div class="x_modal-footer">