From f532e79b9f8633e09b1f0febb8863574b7f70132 Mon Sep 17 00:00:00 2001
From: wangyidong <yidong@cnezsoft.com>
Date: Wed, 13 Aug 2014 01:16:27 +0000
Subject: [PATCH]  * htmlspecialchars the field of kindeditor when edit.

---
 module/build/view/edit.html.php       | 2 +-
 module/doc/view/edit.html.php         | 4 ++--
 module/product/view/edit.html.php     | 2 +-
 module/productplan/view/edit.html.php | 2 +-
 module/project/view/edit.html.php     | 2 +-
 module/release/view/edit.html.php     | 2 +-
 6 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/module/build/view/edit.html.php b/module/build/view/edit.html.php
index fa295d2a3e..61d7a76138 100644
--- a/module/build/view/edit.html.php
+++ b/module/build/view/edit.html.php
@@ -108,7 +108,7 @@
       </tr>
       <tr>
         <th><?php echo $lang->build->desc;?></th>
-        <td colspan='2'><?php echo html::textarea('desc', $build->desc, "rows='10' class='form-control'");?></td>
+        <td colspan='2'><?php echo html::textarea('desc', htmlspecialchars($build->desc), "rows='10' class='form-control'");?></td>
       </tr>
       <tr><td></td><td colspan='2'><?php echo html::submitButton() . html::backButton() .html::hidden('project', $build->project);?></td></tr>
     </table>
diff --git a/module/doc/view/edit.html.php b/module/doc/view/edit.html.php
index bf11af1241..fa1282a893 100644
--- a/module/doc/view/edit.html.php
+++ b/module/doc/view/edit.html.php
@@ -51,11 +51,11 @@ $(document).ready(function()
       </tr>  
       <tr id='contentBox' class='hide'>
         <th><?php echo $lang->doc->content;?></th>
-        <td colspan='2'><?php echo html::textarea('content', $doc->content, "class='form-control' rows='8' style='width:90%; height:200px'");?></td>
+        <td colspan='2'><?php echo html::textarea('content', htmlspecialchars($doc->content), "class='form-control' rows='8' style='width:90%; height:200px'");?></td>
       </tr>  
       <tr>
         <th><?php echo $lang->doc->digest;?></th>
-        <td colspan='2'><?php echo html::textarea('digest', $doc->digest, "class='form-control' rows=3");?></td>
+        <td colspan='2'><?php echo html::textarea('digest', htmlspecialchars($doc->digest), "class='form-control' rows=3");?></td>
       </tr>  
       <tr>
         <th><?php echo $lang->doc->comment;?></th>
diff --git a/module/product/view/edit.html.php b/module/product/view/edit.html.php
index 2d5db7b176..2e0978a181 100644
--- a/module/product/view/edit.html.php
+++ b/module/product/view/edit.html.php
@@ -48,7 +48,7 @@
       </tr>  
       <tr>
         <th><?php echo $lang->product->desc;?></th>
-        <td colspan='2'><?php echo html::textarea('desc', $product->desc, "rows='8' class='form-control'");?></td>
+        <td colspan='2'><?php echo html::textarea('desc', htmlspecialchars($product->desc), "rows='8' class='form-control'");?></td>
       </tr>  
       <tr>
         <th><?php echo $lang->product->acl;?></th>
diff --git a/module/productplan/view/edit.html.php b/module/productplan/view/edit.html.php
index 8b728da495..135e869824 100644
--- a/module/productplan/view/edit.html.php
+++ b/module/productplan/view/edit.html.php
@@ -41,7 +41,7 @@
       </tr>
       <tr>
         <th><?php echo $lang->productplan->desc;?></th>
-        <td colspan='2'><?php echo html::textarea('desc', $plan->desc, "rows='10' class='form-control'");?></td>
+        <td colspan='2'><?php echo html::textarea('desc', htmlspecialchars($plan->desc), "rows='10' class='form-control'");?></td>
       </tr>  
       <tr>
         <td></td>
diff --git a/module/project/view/edit.html.php b/module/project/view/edit.html.php
index ab48fcb52c..2d97694d53 100644
--- a/module/project/view/edit.html.php
+++ b/module/project/view/edit.html.php
@@ -106,7 +106,7 @@
       </tr>
       <tr>
         <th><?php echo $lang->project->desc;?></th>
-        <td colspan='2'><?php echo html::textarea('desc', $project->desc, "rows='6' class='form-control'");?></td>
+        <td colspan='2'><?php echo html::textarea('desc', htmlspecialchars($project->desc), "rows='6' class='form-control'");?></td>
       </tr>  
       <tr>
         <th><?php echo $lang->project->acl;?></th>
diff --git a/module/release/view/edit.html.php b/module/release/view/edit.html.php
index 3724d16a47..16926bd3d1 100644
--- a/module/release/view/edit.html.php
+++ b/module/release/view/edit.html.php
@@ -98,7 +98,7 @@
       </tr>
       <tr>
         <th><?php echo $lang->release->desc;?></th>
-        <td colspan='2'><?php echo html::textarea('desc', $release->desc, "rows=10 class='form-control'");?></td>
+        <td colspan='2'><?php echo html::textarea('desc', htmlspecialchars($release->desc), "rows=10 class='form-control'");?></td>
       </tr>  
       <tr>
         <th><?php echo $lang->files;?></th>