Index: branches/5.3.x/core/units/admin/admin_tag_processor.php =================================================================== diff -u -N -r15698 -r15902 --- branches/5.3.x/core/units/admin/admin_tag_processor.php (.../admin_tag_processor.php) (revision 15698) +++ branches/5.3.x/core/units/admin/admin_tag_processor.php (.../admin_tag_processor.php) (revision 15902) @@ -1,6 +1,6 @@ Application->Phrase($params['label']); - $ret = str_replace(Array('<', '>', 'br/', 'br /', "\n", "\r"), Array('<', '>', 'br', 'br', '', ''), $ret); - if (getArrayValue($params, 'escape')) { - $ret = addslashes($ret); - } - $ret = str_replace('
', '\n', $ret); - return $ret; - } - /** * Draws section tabs using block name passed * @@ -636,9 +625,9 @@ function PrintColumns($params) { + /* @var $picker_helper kColumnPickerHelper */ $picker_helper = $this->Application->recallObject('ColumnPickerHelper'); $picker_helper->SetGridName($this->Application->GetLinkedVar('grid_name')); - /* @var $picker_helper kColumnPickerHelper */ $main_prefix = $this->Application->RecallVar('main_prefix'); $cols = $picker_helper->LoadColumns($main_prefix); @@ -990,10 +979,9 @@ foreach ($a_data as $a_row) { $cells = ''; - $a_row = array_map('htmlspecialchars', $a_row); foreach ($a_row as $value) { - $cells .= '' . $value . ''; + $cells .= '' . kUtil::escape($value, kUtil::ESCAPE_HTML) . ''; } $ret .= $this->Application->ParseBlock(Array ('name' => $block, 'cells' => $cells));