gustafn
committed
on 23 Jun 15
- quote HTML attributes to improve security
openacs-4/.../sitewide-admin/index.adp (+3 -3)
1 1 <master>
2 2 <property name="doc(title)">@title;literal@</property>
3 3 <property name="context">@context;literal@</property>
4 4
5 5 <h1>@title;noquote@</h1>
6 6 <p>
7 7 The current version of the @what@ is @version@.
8 8 The JavaScript code of the @what@ is installed locally
9 9 under<br> <strong>@resource_prefix@</strong>.
10   <p>This directory is <if @writable;literal@ false>not</if> writable for the server.
  10 <p>This directory is <strong><if @writable;literal@ false>not</if> writable</strong> for the server.
11 11
12 12 <if @compressedFile@ nil>
13 13 <p>
14     The JavaScript file @jsFile@ is not compressed.
  14   The JavaScript file <strong>@jsFile@</strong> is not compressed.
15 15   <if @writable;literal@ true and @gzip;literal@ ne "">
16 16     <p>Do you want to compress it now? <a href="compress" class="button">compress</a>
17 17     </p>
18 18   </if>
19 19   <else>
20 20     <p>The directory <strong>@resource_prefix@</strong> is
21 21     NOT writable for the server. If you make it writable,
22 22     you can compress the JavaScript file over this interface.</p>
23 23   </else>
24 24 </if>
25 25 <else>
26   <p>There is a compressed version of @jsFile@ that can be used for
  26 <p>There is a compressed version of <strong>@jsFile@</strong> that can be used for
27 27 delivery via NaviServer.
28 28 </else>