JVN#00876083を修正

baserproject · Oct 24, 2024 · 345ad70 · 345ad70
1 parent 6255313
commit 345ad70
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/plugins/bc-admin-third/templates/plugin/BcBlog/Admin/BlogPosts/edit.php b/plugins/bc-admin-third/templates/plugin/BcBlog/Admin/BlogPosts/edit.php
@@ -36,10 +36,10 @@
     <?php echo $this->BcAdminForm->control('no', ['type' => 'hidden']) ?>
   </span>
   <span class="bca-post__url">
-    <a href="<?php echo $fullUrl ?>"
+    <a href="<?php echo h($fullUrl) ?>"
        class="bca-text-url" target="_blank" data-toggle="tooltip" data-placement="top" title="<?php echo __d('baser_core', '公開URLを開きます') ?>">
       <i class="bca-icon--globe"></i>
-      <?php echo $fullUrl ?>
+      <?php echo h($fullUrl) ?>
     </a>
     <?php echo $this->BcAdminForm->button('', [
       'id' => 'BtnCopyUrl',

diff --git a/plugins/bc-blog/src/Service/BlogPostsService.php b/plugins/bc-blog/src/Service/BlogPostsService.php
@@ -987,7 +987,7 @@ public function getUrl(Content $content, BlogPost $post, $full)
         /** @var ContentsServiceInterface $contentsService */
         $contentsService = $this->getService(ContentsServiceInterface::class);
         $contentUrl = $contentsService->getUrl(rawurldecode($content->url), $full, !empty($site->use_subdomain), false);
-        $no = ($post->name)?: $post->no;
+        $no = ($post->name)? rawurlencode($post->name) : $post->no;
         return $contentUrl . 'archives/' . $no;
     }