[IMPROVED] Auto-escape all used smarty variables

http://www.smarty.net/docs/en/variable.escape.html.tpl Addresses #1233
2014-01-09 11:10:47 +01:00 · 2014-01-09 11:10:47 +01:00 · a2a6f36c1f
commit a2a6f36c1f
parent 02cd098099
1 changed files with 1 additions and 0 deletions
--- a/public/include/smarty.inc.php
+++ b/public/include/smarty.inc.php
@ -170,6 +170,7 @@ if ($config['smarty']['cache']) {
  $smarty->setCaching(Smarty::CACHING_LIFETIME_SAVED);
  $smarty->cache_lifetime = $config['smarty']['cache_lifetime'];
  $smarty->cache_dir = BASEPATH . "templates/cache/" . THEME;
+  $smarty->escape_html = true;
  $smarty->use_sub_dirs = true;
 }
 ?>