litvinovg/vitro
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

VIVO-861 Guard against Cross-Site Scripting attacks in the page title and in the body classes.

Browse source
This commit is contained in:
Jim Blake 2014-09-16 13:19:23 -04:00
parent 2b9a3a5a01
commit fc227d9fcd
2 changed files with 4 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

2
webapp/themes/vitro/templates/head.ftl
View file

@ -4,7 +4,7 @@
<!-- Google Chrome Frame open source plug-in brings Google Chrome's open web technologies and speedy JavaScript engine to Internet Explorer-->
<meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1">
<title>${siteName!}</title>
<title>${(title?html)!siteName!}</title>
<#include "stylesheets.ftl">
<link rel="stylesheet" href="${urls.theme}/css/screen.css" />