diff options
| author | Stanislau Wolski <stanislau.wolski@gmail.com> | 2014-03-17 13:16:25 +0300 |
|---|---|---|
| committer | Stanislau Wolski <stanislau.wolski@gmail.com> | 2014-03-17 13:16:25 +0300 |
| commit | d5d7611f58fdbd5c49df78336c3856d747585c4e (patch) | |
| tree | 53ab9a0df891a50bcf7ef623b48fddd1264b220f /codebase/treegridmultitable_connector.php | |
| parent | 994b6bb658b08010cdfc8dff332409cfab988d78 (diff) | |
| download | connector-php-d5d7611f58fdbd5c49df78336c3856d747585c4e.zip connector-php-d5d7611f58fdbd5c49df78336c3856d747585c4e.tar.gz connector-php-d5d7611f58fdbd5c49df78336c3856d747585c4e.tar.bz2 | |
[fix] escaping special chars in xml attributes
Diffstat (limited to 'codebase/treegridmultitable_connector.php')
| -rw-r--r-- | codebase/treegridmultitable_connector.php | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/codebase/treegridmultitable_connector.php b/codebase/treegridmultitable_connector.php index c380ef6..3f4bbd9 100644 --- a/codebase/treegridmultitable_connector.php +++ b/codebase/treegridmultitable_connector.php @@ -27,7 +27,7 @@ class TreeGridMultitableConnector extends TreeGridConnector{ public function xml_start(){ if (isset($_GET['id'])) { - return "<rows parent='".$this->render->level_id($_GET['id'], $this->get_level() - 1)."'>"; + return "<rows parent='".$this->xmlentities($this->render->level_id($_GET['id'], $this->get_level() - 1))."'>"; } else { return "<rows parent='0'>"; } |