We are now escaping many template fields

[friendica.git] / view / theme / frio / templates / event.tpl

diff --git a/view/theme/frio/templates/event.tpl b/view/theme/frio/templates/event.tpl
index ee2875686635ffcfdc4c6c2b0acf7f1d0641506c..82ed1de09288862c557ba73d7e90addec1b6cbc7 100644 (file)
--- a/view/theme/frio/templates/event.tpl
+++ b/view/theme/frio/templates/event.tpl
@@ -1,5 +1,3 @@
-<script language="javascript" type="text/javascript"
-         src="{{$baseurl}}/view/theme/frio/js/event_edit.js"></script>
 
 {{foreach $events as $event}}
        <div class="event-wrapper">
@@ -8,7 +6,7 @@
                                <div class="event-owner media-left">
                                        {{if $event.item.author_name}}
                                        <a href="{{$event.item.author_link}}" ><img src="{{$event.item.author_avatar}}" /></a>
-                                       <a href="{{$event.item.author_link}}" >{{$event.item.author_name}}</a>
+                                       <a href="{{$event.item.author_link}}" >{{$event.item.author_name|escape}}</a>
                                        {{/if}}
                                </div>
                                <div class="media-body">
@@ -17,8 +15,10 @@
                        </div>
 
                        <div class="event-buttons pull-right">
-                               {{if $event.item.plink}}<a href="{{$event.plink.0}}" title="{{$event.plink.1}}" class="btn "><i class="fa fa-external-link" aria-hidden="true"></i></a>{{/if}}
-                               {{if $event.edit}}<a onclick="eventEdit('{{$event.edit.0}}')" title="{{$event.edit.1}}" class="btn"><i class="fa fa-pencil" aria-hidden="true"></i></a>{{/if}}
+                               {{if $event.edit}}<button type="button" class="btn" onclick="eventEdit('{{$event.edit.0}}')" title="{{$event.edit.1|escape}}"><i class="fa fa-pencil" aria-hidden="true"></i></button>{{/if}}
+                               {{if $event.copy}}<button type="button" class="btn" onclick="eventEdit('{{$event.copy.0}}')" title="{{$event.copy.1|escape}}"><i class="fa fa-files-o" aria-hidden="true"></i></button>{{/if}}
+                               {{if $event.drop}}<a href="{{$event.drop.0}}" onclick="return confirmDelete();" title="{{$event.drop.1|escape}}" class="drop-event-link btn"><i class="fa fa-trash-o" aria-hidden="true"></i></a>{{/if}}
+                               {{if $event.item.plink}}<a href="{{$event.plink.0}}" title="{{$event.plink.1|escape}}" class="plink-event-link btn "><i class="fa fa-external-link" aria-hidden="true"></i></a>{{/if}}
                        </div>
                        <div class="clear"></div>
                </div>