Properly escape special characters in form builder IDs

[GitHub/WoltLab/WCF.git] / com.woltlab.wcf / templates / __singleSelectionFormField.tpl

diff --git a/com.woltlab.wcf/templates/__singleSelectionFormField.tpl b/com.woltlab.wcf/templates/__singleSelectionFormField.tpl
index bd28656d2d6b1a1d1302fea56cfc08e2b2abe7c2..17c3d4f72a38e5ac1216115705178f191cb5c065 100644 (file)
--- a/com.woltlab.wcf/templates/__singleSelectionFormField.tpl
+++ b/com.woltlab.wcf/templates/__singleSelectionFormField.tpl
@@ -11,16 +11,16 @@
                                'wcf.global.filter.visibility.showAll': '{jslang}wcf.global.filter.visibility.showAll{/jslang}'
                        });
                        
-                       new UiItemListFilter('{@$field->getPrefixedId()}_list');
+                       new UiItemListFilter('{@$field->getPrefixedId()|encodeJS}_list');
                });
        </script>
        
-       <ul class="scrollableCheckboxList" id="{@$field->getPrefixedId()}_list">
+       <ul class="scrollableCheckboxList" id="{$field->getPrefixedId()}_list">
                {foreach from=$field->getNestedOptions() item=__fieldNestedOption}
                        <li{if $__fieldNestedOption[depth] > 0} style="padding-left: {$__fieldNestedOption[depth]*20}px"{/if}>
                                <label><input {*
                                                *}type="radio" {*
-                                               *}name="{@$field->getPrefixedId()}" {*
+                                               *}name="{$field->getPrefixedId()}" {*
                                                *}value="{$__fieldNestedOption[value]}"{*
                                                *}{if !$field->getFieldClasses()|empty} class="{implode from=$field->getFieldClasses() item='class' glue=' '}{$class}{/implode}"{/if}{*
                                                *}{if $field->getValue() == $__fieldNestedOption[value] && $__fieldNestedOption[isSelectable]} checked{/if}{*
@@ -30,13 +30,13 @@
                {/foreach}
        </ul>
 {else}
-       <select id="{@$field->getPrefixedId()}" {*
-               *}name="{@$field->getPrefixedId()}"{*
+       <select id="{$field->getPrefixedId()}" {*
+               *}name="{$field->getPrefixedId()}"{*
                *}{if !$field->getFieldClasses()|empty} class="{implode from=$field->getFieldClasses() item='class' glue=' '}{$class}{/implode}"{/if}{*
        *}>
                {foreach from=$field->getNestedOptions() item=__fieldNestedOption}
                        <option {*
-                               *}name="{@$field->getPrefixedId()}" {*
+                               *}name="{$field->getPrefixedId()}" {*
                                *}value="{$__fieldNestedOption[value]}"{*
                                *}{if $field->getValue() == $__fieldNestedOption[value] && $__fieldNestedOption[isSelectable]} selected{/if}{*
                                *}{if $field->isImmutable() || !$__fieldNestedOption[isSelectable]} disabled{/if}{*