42db0dfb57eca97ed62e2eb22a468c97099d5acf

Author: Mark Story

Date: 2009-11-01 01:40:41 -0400

Adding htmlentity conversion to HtmlToolbar::table() as it was possible for sql conditions to cause invalid html.

diff --git a/views/helpers/html_toolbar.php b/views/helpers/html_toolbar.php index 0e52082..c6ab420 100644 --- a/views/helpers/html_toolbar.php +++ b/views/helpers/html_toolbar.php @@ -124,7 +124,7 @@ class HtmlToolbarHelper extends ToolbarHelper { if (!empty($headers)) { $out .= $this->Html->tableHeaders($headers); } - $out .= $this->Html->tableCells($rows, array('class' => 'odd'), array('class' => 'even'), false, false); + $out .= $this->Html->tableCells(h($rows), array('class' => 'odd'), array('class' => 'even'), false, false); $out .= '</table>'; return $out; }