From 7e0df0a970135cc709b4c6c9de3cfc00044cb6c0 Mon Sep 17 00:00:00 2001
From: Remigijus Kiminas <remdex@gmail.com>
Date: Mon, 21 Jun 2021 09:05:38 -0400
Subject: [PATCH] Template escape

---
 .../custom_fallback_tab_content_multiinclude.tpl.php          | 4 ++--
 .../extension_information_row_multiinclude.tpl.php            | 4 ++--
 design/fbmessengertheme/tpl/lhfbmessenger/bbcode.tpl.php      | 2 +-
 design/fbmessengertheme/tpl/lhfbmessenger/edit.tpl.php        | 2 +-
 design/fbmessengertheme/tpl/lhfbmessenger/editbbcode.tpl.php  | 2 +-
 .../tpl/lhfbmessenger/editnotification.tpl.php                | 2 +-
 design/fbmessengertheme/tpl/lhfbmessenger/leads.tpl.php       | 2 +-
 design/fbmessengertheme/tpl/lhfbmessenger/list.tpl.php        | 2 +-
 design/fbmessengertheme/tpl/lhfbmessenger/myfbpages.tpl.php   | 2 +-
 design/fbmessengertheme/tpl/lhfbmessenger/new.tpl.php         | 2 +-
 design/fbmessengertheme/tpl/lhfbmessenger/newbbcode.tpl.php   | 2 +-
 .../tpl/lhfbmessenger/newnotification.tpl.php                 | 2 +-
 .../fbmessengertheme/tpl/lhfbmessenger/notifications.tpl.php  | 2 +-
 design/fbmessengertheme/tpl/lhfbmessenger/options.tpl.php     | 2 +-
 14 files changed, 16 insertions(+), 16 deletions(-)

diff --git a/design/fbmessengertheme/tpl/lhchat/cannedmsg/custom_fallback_tab_content_multiinclude.tpl.php b/design/fbmessengertheme/tpl/lhchat/cannedmsg/custom_fallback_tab_content_multiinclude.tpl.php
index 35970ef..52cbdd6 100644
--- a/design/fbmessengertheme/tpl/lhchat/cannedmsg/custom_fallback_tab_content_multiinclude.tpl.php
+++ b/design/fbmessengertheme/tpl/lhchat/cannedmsg/custom_fallback_tab_content_multiinclude.tpl.php
@@ -1,10 +1,10 @@
 <div role="tabpanel" class="tab-pane" id="main-extension-fb">
     <div class="form-group">
         <label><?php echo erTranslationClassLhTranslation::getInstance()->getTranslation('chat/cannedmsg','Message');?></label>
-        <textarea class="form-control" name="MessageExtFB"><?php echo isset($canned_message->additional_data_array['message_fb']) ? $canned_message->additional_data_array['message_fb'] : '';?></textarea>
+        <textarea class="form-control" name="MessageExtFB" ng-non-bindable><?php echo isset($canned_message->additional_data_array['message_fb']) ? $canned_message->additional_data_array['message_fb'] : '';?></textarea>
     </div>
     <div class="form-group">
         <label><?php echo erTranslationClassLhTranslation::getInstance()->getTranslation('chat/cannedmsg','Fallback message');?></label>
-        <textarea class="form-control" name="FallbackMessageExtFB"><?php echo isset($canned_message->additional_data_array['fallback_fb']) ? $canned_message->additional_data_array['fallback_fb'] : '';?></textarea>
+        <textarea class="form-control" name="FallbackMessageExtFB" ng-non-bindable><?php echo isset($canned_message->additional_data_array['fallback_fb']) ? $canned_message->additional_data_array['fallback_fb'] : '';?></textarea>
     </div>
 </div>
\ No newline at end of file
diff --git a/design/fbmessengertheme/tpl/lhchat/chat_tabs/information_rows/extension_information_row_multiinclude.tpl.php b/design/fbmessengertheme/tpl/lhchat/chat_tabs/information_rows/extension_information_row_multiinclude.tpl.php
index 0035e3c..ee33f52 100644
--- a/design/fbmessengertheme/tpl/lhchat/chat_tabs/information_rows/extension_information_row_multiinclude.tpl.php
+++ b/design/fbmessengertheme/tpl/lhchat/chat_tabs/information_rows/extension_information_row_multiinclude.tpl.php
@@ -1,7 +1,7 @@
 <?php if ($buttonData['item'] == 'fb_chat') : ?>
 
     <?php if (isset($chat->chat_variables_array['fb_chat']) && $chat->chat_variables_array['fb_chat'] == true) : ?>
-    <tr>
+    <tr ng-non-bindable>
         <td>
             <img width="14" src="<?php echo erLhcoreClassDesign::design('images/F_icon.svg')?>" title="Facebook chat" />&nbsp;<?php echo erTranslationClassLhTranslation::getInstance()->getTranslation('chat/adminchat','FB Chat')?>
         </td>
@@ -14,7 +14,7 @@
     if ($fbLead instanceof erLhcoreClassModelFBLead) : $fbNotification = erLhcoreClassModelFBNotificationScheduleItem::findOne(array('filter' => array('lead_id' => $fbLead->id,'status' => 1)));
     if ($fbNotification instanceof erLhcoreClassModelFBNotificationScheduleItem) : $fbSchedule = erLhcoreClassModelFBNotificationSchedule::fetch($fbNotification->schedule_id);
     if ($fbSchedule instanceof erLhcoreClassModelFBNotificationSchedule) : ?>
-    <tr>
+    <tr ng-non-bindable>
         <td colspan="2">
             <h5><strong><?php echo erTranslationClassLhTranslation::getInstance()->getTranslation('chat/adminchat','Last marketing message')?></strong></h5>
             <?php echo erLhcoreClassBBCode::make_clickable(htmlspecialchars($fbSchedule->message));?>
diff --git a/design/fbmessengertheme/tpl/lhfbmessenger/bbcode.tpl.php b/design/fbmessengertheme/tpl/lhfbmessenger/bbcode.tpl.php
index 6306e4e..4fbd52d 100644
--- a/design/fbmessengertheme/tpl/lhfbmessenger/bbcode.tpl.php
+++ b/design/fbmessengertheme/tpl/lhfbmessenger/bbcode.tpl.php
@@ -2,7 +2,7 @@
 
 <?php if (isset($items)) : ?>
 
-<table cellpadding="0" cellspacing="0" class="table" width="100%">
+<table cellpadding="0" cellspacing="0" class="table" width="100%" ng-non-bindable>
     <thead>
     <tr>
         <th><?php echo erTranslationClassLhTranslation::getInstance()->getTranslation('module/fbmessenger','Name');?></th>
diff --git a/design/fbmessengertheme/tpl/lhfbmessenger/edit.tpl.php b/design/fbmessengertheme/tpl/lhfbmessenger/edit.tpl.php
index 8846ae6..3252462 100644
--- a/design/fbmessengertheme/tpl/lhfbmessenger/edit.tpl.php
+++ b/design/fbmessengertheme/tpl/lhfbmessenger/edit.tpl.php
@@ -4,7 +4,7 @@
 	<?php include(erLhcoreClassDesign::designtpl('lhkernel/validation_error.tpl.php'));?>
 <?php endif; ?>
 
-<form action="<?php echo erLhcoreClassDesign::baseurl('fbmessenger/edit')?>/<?php echo $item->id?>" method="post">
+<form action="<?php echo erLhcoreClassDesign::baseurl('fbmessenger/edit')?>/<?php echo $item->id?>" method="post" ng-non-bindable>
 
 	<?php include(erLhcoreClassDesign::designtpl('lhfbmessenger/parts/form.tpl.php'));?>
 
diff --git a/design/fbmessengertheme/tpl/lhfbmessenger/editbbcode.tpl.php b/design/fbmessengertheme/tpl/lhfbmessenger/editbbcode.tpl.php
index cc02096..a730956 100644
--- a/design/fbmessengertheme/tpl/lhfbmessenger/editbbcode.tpl.php
+++ b/design/fbmessengertheme/tpl/lhfbmessenger/editbbcode.tpl.php
@@ -4,7 +4,7 @@
     <?php include(erLhcoreClassDesign::designtpl('lhkernel/validation_error.tpl.php'));?>
 <?php endif; ?>
 
-<form action="<?php echo erLhcoreClassDesign::baseurl('fbmessenger/editbbcode')?>/<?php echo $item->id?>" method="post">
+<form action="<?php echo erLhcoreClassDesign::baseurl('fbmessenger/editbbcode')?>/<?php echo $item->id?>" method="post" ng-non-bindable>
 
     <?php include(erLhcoreClassDesign::designtpl('lhfbmessenger/parts/form_bbcode.tpl.php'));?>
 
diff --git a/design/fbmessengertheme/tpl/lhfbmessenger/editnotification.tpl.php b/design/fbmessengertheme/tpl/lhfbmessenger/editnotification.tpl.php
index c64caeb..b30ad73 100644
--- a/design/fbmessengertheme/tpl/lhfbmessenger/editnotification.tpl.php
+++ b/design/fbmessengertheme/tpl/lhfbmessenger/editnotification.tpl.php
@@ -8,7 +8,7 @@
     <?php include(erLhcoreClassDesign::designtpl('lhkernel/alert_success.tpl.php'));?>
 <?php endif; ?>
 
-<form action="<?php echo erLhcoreClassDesign::baseurl('fbmessenger/editnotification')?>/<?php echo $item->id?>" method="post">
+<form action="<?php echo erLhcoreClassDesign::baseurl('fbmessenger/editnotification')?>/<?php echo $item->id?>" method="post" ng-non-bindable>
 
     <?php include(erLhcoreClassDesign::designtpl('lhfbmessenger/parts/form_notification.tpl.php'));?>
 
diff --git a/design/fbmessengertheme/tpl/lhfbmessenger/leads.tpl.php b/design/fbmessengertheme/tpl/lhfbmessenger/leads.tpl.php
index 6f86b3b..c9a1944 100644
--- a/design/fbmessengertheme/tpl/lhfbmessenger/leads.tpl.php
+++ b/design/fbmessengertheme/tpl/lhfbmessenger/leads.tpl.php
@@ -8,7 +8,7 @@
 
 <?php if (isset($items)) : ?>
 
-    <table cellpadding="0" cellspacing="0" class="table table-sm" width="100%">
+    <table cellpadding="0" cellspacing="0" class="table table-sm" width="100%" ng-non-bindable>
         <thead>
         <tr>
             <th><?php echo erTranslationClassLhTranslation::getInstance()->getTranslation('module/fbmessenger','ID');?></th>
diff --git a/design/fbmessengertheme/tpl/lhfbmessenger/list.tpl.php b/design/fbmessengertheme/tpl/lhfbmessenger/list.tpl.php
index 9ce5c5f..9026962 100644
--- a/design/fbmessengertheme/tpl/lhfbmessenger/list.tpl.php
+++ b/design/fbmessengertheme/tpl/lhfbmessenger/list.tpl.php
@@ -2,7 +2,7 @@
 
 <?php if (isset($items)) : ?>
 
-<table cellpadding="0" cellspacing="0" class="table table-sm" width="100%">
+<table cellpadding="0" cellspacing="0" class="table table-sm" width="100%" ng-non-bindable>
 <thead>
     <tr>   
         <th width="1%">ID</th>
diff --git a/design/fbmessengertheme/tpl/lhfbmessenger/myfbpages.tpl.php b/design/fbmessengertheme/tpl/lhfbmessenger/myfbpages.tpl.php
index 8858710..d1d7f45 100644
--- a/design/fbmessengertheme/tpl/lhfbmessenger/myfbpages.tpl.php
+++ b/design/fbmessengertheme/tpl/lhfbmessenger/myfbpages.tpl.php
@@ -1,4 +1,4 @@
-<table class="table">
+<table class="table" ng-non-bindable>
     <thead>
         <th colspan="3">Page</th>
     </thead>
diff --git a/design/fbmessengertheme/tpl/lhfbmessenger/new.tpl.php b/design/fbmessengertheme/tpl/lhfbmessenger/new.tpl.php
index cdf44b9..14f285a 100644
--- a/design/fbmessengertheme/tpl/lhfbmessenger/new.tpl.php
+++ b/design/fbmessengertheme/tpl/lhfbmessenger/new.tpl.php
@@ -4,7 +4,7 @@
 	<?php include(erLhcoreClassDesign::designtpl('lhkernel/validation_error.tpl.php'));?>
 <?php endif; ?>
 
-<form action="<?php echo erLhcoreClassDesign::baseurl('fbmessenger/new')?>" method="post">
+<form action="<?php echo erLhcoreClassDesign::baseurl('fbmessenger/new')?>" method="post" ng-non-bindable>
 
 	<?php include(erLhcoreClassDesign::designtpl('lhfbmessenger/parts/form.tpl.php'));?>
 	
diff --git a/design/fbmessengertheme/tpl/lhfbmessenger/newbbcode.tpl.php b/design/fbmessengertheme/tpl/lhfbmessenger/newbbcode.tpl.php
index 6987c54..46a2680 100644
--- a/design/fbmessengertheme/tpl/lhfbmessenger/newbbcode.tpl.php
+++ b/design/fbmessengertheme/tpl/lhfbmessenger/newbbcode.tpl.php
@@ -4,7 +4,7 @@
     <?php include(erLhcoreClassDesign::designtpl('lhkernel/validation_error.tpl.php'));?>
 <?php endif; ?>
 
-<form action="<?php echo erLhcoreClassDesign::baseurl('fbmessenger/newbbcode')?>" method="post">
+<form action="<?php echo erLhcoreClassDesign::baseurl('fbmessenger/newbbcode')?>" method="post" ng-non-bindable>
 
     <?php include(erLhcoreClassDesign::designtpl('lhfbmessenger/parts/form_bbcode.tpl.php'));?>
 
diff --git a/design/fbmessengertheme/tpl/lhfbmessenger/newnotification.tpl.php b/design/fbmessengertheme/tpl/lhfbmessenger/newnotification.tpl.php
index f9fb1a6..54e2df1 100644
--- a/design/fbmessengertheme/tpl/lhfbmessenger/newnotification.tpl.php
+++ b/design/fbmessengertheme/tpl/lhfbmessenger/newnotification.tpl.php
@@ -4,7 +4,7 @@
     <?php include(erLhcoreClassDesign::designtpl('lhkernel/validation_error.tpl.php'));?>
 <?php endif; ?>
 
-<form action="<?php echo erLhcoreClassDesign::baseurl('fbmessenger/newnotification')?>" method="post">
+<form action="<?php echo erLhcoreClassDesign::baseurl('fbmessenger/newnotification')?>" method="post" ng-non-bindable>
 
     <?php include(erLhcoreClassDesign::designtpl('lhfbmessenger/parts/form_notification.tpl.php'));?>
 
diff --git a/design/fbmessengertheme/tpl/lhfbmessenger/notifications.tpl.php b/design/fbmessengertheme/tpl/lhfbmessenger/notifications.tpl.php
index a58930c..050879c 100644
--- a/design/fbmessengertheme/tpl/lhfbmessenger/notifications.tpl.php
+++ b/design/fbmessengertheme/tpl/lhfbmessenger/notifications.tpl.php
@@ -8,7 +8,7 @@
 
 <?php if (isset($items)) : ?>
 
-    <table cellpadding="0" cellspacing="0" class="table table-sm" width="100%">
+    <table cellpadding="0" cellspacing="0" class="table table-sm" width="100%" ng-non-bindable>
         <thead>
         <tr>
             <th><?php echo erTranslationClassLhTranslation::getInstance()->getTranslation('module/fbmessenger','Name');?></th>
diff --git a/design/fbmessengertheme/tpl/lhfbmessenger/options.tpl.php b/design/fbmessengertheme/tpl/lhfbmessenger/options.tpl.php
index bb4846c..ed8d39f 100644
--- a/design/fbmessengertheme/tpl/lhfbmessenger/options.tpl.php
+++ b/design/fbmessengertheme/tpl/lhfbmessenger/options.tpl.php
@@ -1,6 +1,6 @@
 <h1 class="attr-header">Facebook Messenger Options</h1>
 
-<form action="" method="post">
+<form action="" method="post" ng-non-bindable>
 
     <?php include(erLhcoreClassDesign::designtpl('lhkernel/csfr_token.tpl.php'));?>