dualfroz
bb891e182e
LayoutHelper::analytic() prefixes the title with the raw project name, and the AJAX branch of analytic/layout.php printed that title as is, so a project name containing markup was injected into the analytic modals. Escape it with $this->text->e() like the other layouts do. It does not double-encode, so the ">" separator still renders as ">".
15 lines
427 B
PHP
15 lines
427 B
PHP
<?php if ($is_ajax): ?>
|
|
<div class="page-header">
|
|
<h2><?= $this->text->e($title) ?></h2>
|
|
</div>
|
|
<?php else: ?>
|
|
<?= $this->projectHeader->render($project, 'TaskListController', 'show') ?>
|
|
<?php endif ?>
|
|
<section class="sidebar-container">
|
|
<?= $this->render($sidebar_template, array('project' => $project)) ?>
|
|
|
|
<div class="sidebar-content">
|
|
<?= $content_for_sublayout ?>
|
|
</div>
|
|
</section>
|