From 09599e7f99fbfa562590401974b0ed4283b6d888 Mon Sep 17 00:00:00 2001
From: mooo <mooo@201d5d3c-b55e-5fd7-737f-ddc643e51545>
Date: Wed, 22 Apr 2009 07:43:12 +0000
Subject: [PATCH] =?UTF-8?q?issuetrackerModel::getChangesets()=20=EC=97=90?=
 =?UTF-8?q?=EC=84=9C=20commit=20=EB=A9=94=EC=8B=9C=EC=A7=80=EC=97=90=20HTM?=
 =?UTF-8?q?L=20=EC=BD=94=EB=93=9C=EA=B0=80=20=EB=93=A4=EC=96=B4=EA=B0=88?=
 =?UTF-8?q?=20=EA=B2=BD=EC=9A=B0=20timeline=20=EB=AA=A9=EB=A1=9D=EC=97=90?=
 =?UTF-8?q?=EC=84=9C=20=EB=A0=88=EC=9D=B4=EC=95=84=EC=9B=83=20=EA=B9=A8?=
 =?UTF-8?q?=EC=A7=80=EB=8A=94=20=EA=B2=83=EC=9D=84=20=EB=B0=A9=EC=A7=80?=
 =?UTF-8?q?=ED=95=98=EA=B8=B0=20=EC=9C=84=ED=95=B4=20=20htmlspecialchars()?=
 =?UTF-8?q?=20=ED=95=A8=EC=88=98=EB=A5=BC=20=EC=A0=81=EC=9A=A9?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

git-svn-id: http://xe-core.googlecode.com/svn/sandbox@6164 201d5d3c-b55e-5fd7-737f-ddc643e51545
---
 modules/issuetracker/issuetracker.model.php   | 22 +++++++------------
 .../skins/xe_issuetracker/timeline.html       | 16 +++++++-------
 2 files changed, 16 insertions(+), 22 deletions(-)

diff --git a/modules/issuetracker/issuetracker.model.php b/modules/issuetracker/issuetracker.model.php
index d107f90a9..ab2b4e603 100644
--- a/modules/issuetracker/issuetracker.model.php
+++ b/modules/issuetracker/issuetracker.model.php
@@ -157,7 +157,7 @@
             return $output;
         }
 
-        function getList($module_srl, $listname) 
+        function getList($module_srl, $listname)
         {
             if(!$module_srl) return array();
 
@@ -201,7 +201,7 @@
             return $histories;
         }
 
-        function getPackageList($module_srl, $package_srl=0, $each_releases_count = 0) 
+        function getPackageList($module_srl, $package_srl=0, $each_releases_count = 0)
         {
             if(!$module_srl) return array();
 
@@ -396,18 +396,12 @@
             if(in_array('commit', $targets))
             {
                 $output = executeQueryArray("issuetracker.getChangesets", $args);
-                if(!$output->toBool())
-                {
-                    return array();
-                }
-            }
-            if(!$output->data)
-            {
-                $output->data = array();
-            }
-            foreach($output->data as $key => $changeset)
-            {
-                $changeset->message = $this->_linkXE($changeset->message);
+                if(!$output->toBool()) return array();
+                if(!$output->data) $output->data = array();
+
+                // message에 htmlspecialchars() 적용
+                foreach($output->data as $key => $changeset)
+                    $changeset->message = htmlspecialchars($this->_linkXE($changeset->message));
             }
 
             if(in_array('issue_changed', $targets))
diff --git a/modules/issuetracker/skins/xe_issuetracker/timeline.html b/modules/issuetracker/skins/xe_issuetracker/timeline.html
index 2b67bbd52..e52e860a8 100644
--- a/modules/issuetracker/skins/xe_issuetracker/timeline.html
+++ b/modules/issuetracker/skins/xe_issuetracker/timeline.html
@@ -1,18 +1,18 @@
 <!--#include('header.html')-->
 <!--%load_js_plugin("ui.datepicker")-->
-<div class="left"><h2> Timeline </h2></div>
+<div class="left"><h2>Timeline</h2></div>
 <div class="search">
 <form action="{getUrl()}" id="fo_search">
     <br />
     <input type="hidden" name="act" value="dispIssuetrackerTimeline" />
     <input type="hidden" name="mid" value="{$mid}" />
-    {$lang->msg_changes_from}: 
-    <input type="hidden" name="enddate" id="enddate" class="inputTypeText" value="{$enddate}">
+    {$lang->msg_changes_from}:
+    <input type="hidden" name="enddate" id="enddate" class="inputTypeText" value="{$enddate}" />
     <input type="text" class="inputDate" value="<!--@if($enddate)-->{zdate($enddate,'Y-m-d')}<!--@end-->" readonly="readonly" />
-    , {$lang->duration}: <input type="text" name="duration" class="inputTypeText w40" value={$duration}>
-    <BR />
+    , {$lang->duration}: <input type="text" name="duration" class="inputTypeText w40" value="{$duration}" />
+    <br />
     <!--@foreach($lang->target_list as $key => $val)-->
-    <input name="targets[]" type="checkbox" value="{$key}" <!--@if(in_array($key,$targets))-->checked="checked"<!--@end--> id="targets_{$key}"/><label for="targets_{$key}">{$val}</label>
+    <input name="targets[]" type="checkbox" value="{$key}" <!--@if(in_array($key,$targets))-->checked="checked"<!--@end--> id="targets_{$key}"/><label for="targets_{$key}"> {$val}</label>
     <!--@end-->
     <a href="#" onclick="xGetElementById('fo_search').submit();return false;" class="button {$btn_class}"><span>{$lang->cmd_update}</span></a>
 
@@ -40,8 +40,8 @@
     <a href="{getUrl('act','dispIssuetrackerViewSource','erev',$changeset->revision,'type','log')}">Changeset <em>[{$changeset->revision}]</em></a> by <span class="author">{$changeset->author}</span>
     <!--@end-->
 </dt>
-<dd class="changeset"> 
-<p><!--@if($changeset->type)--><!--@if($changeset->type == "changed")--><span class="status">{$changeset->message}</span><br><!--@endif-->{$issues[$changeset->target_srl]->getContentText(80)}<!--@else-->{$changeset->message}<!--@end--></p> </dd>
+<dd class="changeset">
+<p><!--@if($changeset->type)--><!--@if($changeset->type == "changed")--><span class="status">{$changeset->message}</span><br /><!--@endif-->{$issues[$changeset->target_srl]->getContentText(80)}<!--@else-->{$changeset->message}<!--@end--></p></dd>
 <!--@end-->
 </dl>
 <script type="text/javascript">