Skip to content

Commit 936fb2b

Browse files
committed
Out: Fix some special characters not being escaped
1 parent f17083d commit 936fb2b

File tree

5 files changed

+7
-5
lines changed

5 files changed

+7
-5
lines changed

src/PHPDraft/Model/HTTPRequest.php

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -83,7 +83,7 @@ public function parse($object)
8383
$this->parse_structure($value);
8484
continue;
8585
} elseif ($value->element === 'copy'){
86-
$this->description = MarkdownExtra::defaultTransform($value->content);
86+
$this->description = MarkdownExtra::defaultTransform(htmlentities($value->content));
8787
}elseif ($value->element === 'asset') {
8888
if (in_array('messageBody', $value->meta->classes)) {
8989
$this->body[] = (isset($value->content)) ? $value->content : null;

src/PHPDraft/Model/HTTPResponse.php

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -112,7 +112,7 @@ protected function parse_content($object)
112112
$this->parse_structure($value->content);
113113
continue;
114114
}else if ($value->element === 'copy'){
115-
$this->description = MarkdownExtra::defaultTransform($value->content);
115+
$this->description = MarkdownExtra::defaultTransform(htmlentities($value->content));
116116
continue;
117117
}
118118

src/PHPDraft/Model/HierarchyElement.php

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -66,7 +66,7 @@ public function parse($object)
6666
{
6767
if ($item->element === 'copy')
6868
{
69-
$this->description = preg_replace('/(<\/?p>)/', '', MarkdownExtra::defaultTransform($item->content), 2);
69+
$this->description = preg_replace('/(<\/?p>)/', '', MarkdownExtra::defaultTransform(htmlentities($item->content)), 2);
7070
unset($object->content[$key]);
7171
continue;
7272
}

src/PHPDraft/Out/HTML/default.phtml

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -216,7 +216,9 @@ use Enjoy\HttpStatusCode\Statuscodes;
216216

217217
<?php if ($transition->data_variables !== null): ?>
218218
<h5>Request object</h5>
219-
<?= $transition->data_variables ?>
219+
<div class="row">
220+
<?= $transition->data_variables ?>
221+
</div>
220222
<?php endif; ?>
221223
</div>
222224
</div>

src/PHPDraft/Out/TemplateGenerator.php

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -108,7 +108,7 @@ public function get($object)
108108
foreach ($object->content[0]->content as $value) {
109109
if ($value->element === 'copy')
110110
{
111-
$this->base_data['DESC'] = preg_replace('/(<\/?p>)/', '', MarkdownExtra::defaultTransform($value->content), 2);
111+
$this->base_data['DESC'] = preg_replace('/(<\/?p>)/', '', MarkdownExtra::defaultTransform(htmlentities($value->content)), 2);
112112
continue;
113113
}
114114

0 commit comments

Comments
 (0)