value()->path());
$wishlistHTMLview .= ''.
- 'value()->path()."'".');">'.
+ ''.
''.
$n->value()->title().' | ';
}
@@ -1305,9 +1310,10 @@ sub wishlistMove {
$highlight = 'style="color:red;"';
}
# link-image and title
+ my $quotable_link = &Apache::loncommon::escape_single($n->value()->path());
$wishlistHTMLmove .= ' | '.
''.
- 'value()->path()."'".');" '.$highlight.'>'.
+ ''.
''.
$n->value()->title().' | ';
}
@@ -1425,7 +1431,8 @@ sub wishlistImport {
else {
$wishlistHTMLimport .= '';
unless ($nopick{$n->value()->path()}) {
- $wishlistHTMLimport .= 'value()->path()."'".');">';
+ my $quotable_link = &Apache::loncommon::escape_single($n->value()->path());
+ $wishlistHTMLimport .= '';
}
$wishlistHTMLimport .= ''.
''.$n->value()->title().' | ';
@@ -1658,6 +1665,8 @@ sub makePopUpNewLink {
' or to external websites.'.
' Paths to LON-CAPA resources must be of the form /res/domain/user/...'.
' Paths to external websites must contain the network protocol, e.g. http://...');
+ &js_escape(\$warningLink);
+ &js_escape(\$warningLinkNotAllowed1);
my $inPageWishlistlink1 = ''.&mt('Save to Stored Links').'
';
# If no title is delivered, 'New Link' is called up from the wishlist-interface, so after
@@ -1761,7 +1770,7 @@ sub makePopUpNewFolder {
'bgcolor' => '#FFFFFF',});
my $warningFolder = &mt('You must insert a title!');
-
+ &js_escape(\$warningFolder);
my $inPageNewFolder = ''.&mt('New Folder').'
'.
'