Bug #22499 ยป 14179-strip_tags_v2.patch
| t3lib/class.t3lib_tceforms.php (working copy) | ||
|---|---|---|
|
$opt[]= '<option value="'.htmlspecialchars($p[1]).'"'.
|
||
|
$sM.
|
||
|
($styleAttrValue ? ' style="'.htmlspecialchars($styleAttrValue).'"' : '').
|
||
|
'>'.t3lib_div::deHSCentities(htmlspecialchars($p[0])).'</option>' . LF;
|
||
|
'>' . t3lib_div::deHSCentities(($p[0])) . '</option>' . LF;
|
||
|
}
|
||
|
}
|
||
|
|
||
| ... | ... | |
|
// Perform modification of the selected items array:
|
||
|
foreach($itemArray as $tk => $tv) {
|
||
|
$tvP = explode('|',$tv,2);
|
||
|
$evalValue = rawurldecode($tvP[0]);
|
||
|
$evalValue = ($tvP[0]);
|
||
|
$isRemoved = in_array($evalValue,$removeItems) || ($config['form_type']=='select' && $config['authMode'] && !$GLOBALS['BE_USER']->checkAuthMode($table,$field,$evalValue,$config['authMode']));
|
||
|
if ($isRemoved && !$PA['fieldTSConfig']['disableNoMatchingValueElement'] && !$config['disableNoMatchingValueElement']) {
|
||
|
$tvP[1] = rawurlencode(@sprintf($nMV_label, $evalValue));
|
||
| ... | ... | |
|
// Case: flexform, default values supplied, no label provided (bug #9795)
|
||
|
foreach ($selItems as $selItem) {
|
||
|
if ($selItem[1] == $tvP[0]) {
|
||
|
$tvP[1] = $selItem[0];
|
||
|
$tvP[1] = html_entity_decode($selItem[0]);
|
||
|
break;
|
||
|
}
|
||
|
}
|
||
| ... | ... | |
|
}
|
||
|
$opt[]= '<option value="'.htmlspecialchars($p[1]).'"'.
|
||
|
($styleAttrValue ? ' style="'.htmlspecialchars($styleAttrValue).'"' : '').
|
||
|
'>'.htmlspecialchars($p[0]).'</option>';
|
||
|
'>' . $p[0] . '</option>';
|
||
|
}
|
||
|
|
||
|
// Put together the selector box:
|
||
| ... | ... | |
|
|
||
|
// Add the item:
|
||
|
$items[] = array(
|
||
|
$lPrefix.strip_tags(t3lib_BEfunc::getRecordTitle($f_table,$row)),
|
||
|
$uidPre.$row['uid'],
|
||
|
$lPrefix . htmlspecialchars(t3lib_BEfunc::getRecordTitle($f_table, $row)),
|
||
|
$uidPre . $row['uid'],
|
||
|
$icon
|
||
|
);
|
||
|
}
|
||