[% META title = 'Manage members' %] <p> This page lists the current members for <b>[% taskid_login %]</b>. + Below, you can delete members from the [% taskid_login %] by selecting one or more records in the table below. You can also add + new member(s) to this task ID by clicking on <b class="important">Add member</b>. </p> <div class="alternate-rule"><hr/></div> <p class="ind-link"> <a class="forward-em-link" href="[% webActionProcessor.controllerN +ame %]?action=add_taskid_member&taskid_auth=[% taskid_auth | uri | ht +ml %]&taskid_login=[% taskid_login |uri |html %]" title="Click here t +o add a new Task ID member.">Add member</a> </p> [%# Show global delete message only if records were deleted... %] [% IF NumberOfDeletedRecords %] [% INCLUDE global_message.tt globalMessage=NumberOfDeletedRecords +_ ' records have been deleted.' %] [% END %] [% INCLUDE form_table.tt table=TaskIDMembersTable %]
I HAVE USED URI | HTML FOR THE LINK MENTIONED ABOVE BUT IT'S NOT ENCODING CHARACTERS LIKE <>'", . BUT ONLY @ IS ENCODED TO %. PLEASE HELP, HOW TO ENCODE ALL THE CHARACTERS IF USED ATTACKING <SCRIPT> TAGS IN URL.
In reply to I want to encode html entities in TT format to remove cross site scripting, I have followed the articles here for xss but could not able to implement in my code. by dipit
| For: | Use: | ||
| & | & | ||
| < | < | ||
| > | > | ||
| [ | [ | ||
| ] | ] |