* luci/themes: fix xml errors triggered by query strings in menu entries

[project/luci.git] / themes / openwrt-light / luasrc / view / themes / openwrt-light / header.htm
diff --git a/themes/openwrt-light/luasrc/view/themes/openwrt-light/header.htm b/themes/openwrt-light/luasrc/view/themes/openwrt-light/header.htm

index e9e1a13..31b1ad0 100644 (file)
--- a/themes/openwrt-light/luasrc/view/themes/openwrt-light/header.htm
+++ b/themes/openwrt-light/luasrc/view/themes/openwrt-light/header.htm
@@ -36,14 +36,14 @@ require("luci.http").prepare_content("text/html")
  -%>
  
  <?xml version="1.0" encoding="utf-8"?>
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.1//EN" "http://www.w3.org/TR/xhtml11/DTD/xhtml11.dtd">
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
  <html xmlns="http://www.w3.org/1999/xhtml">
  <head>
         <link rel="stylesheet" type="text/css" href="<%=media%>/cascade.css" />
         <% if node and node.css then %><link rel="stylesheet" type="text/css" href="<%=resource%>/<%=node.css%>" /><% end %>
         <meta http-equiv="content-type" content="application/xhtml+xml; charset=utf-8" />
         <meta http-equiv="content-script-type" content="text/javascript" />
-       <title><%= hostname .. ( (node and node.title) and ' - ' .. node.title or '') %> - LuCI</title>
+       <title><%=striptags( hostname .. ( (node and node.title) and ' - ' .. node.title or '')) %> - LuCI</title>
  
         <!--[if lt IE 7]>
                 <script type="text/javascript">
@@ -55,7 +55,7 @@ require("luci.http").prepare_content("text/html")
  
                                 var lis  = document.getElementById("mainmenu").getElementsByTagName("LI");
                                 var divs = document.getElementById("mainmenu").getElementsByTagName("DIV");
-                               
+
                                 for( var i = 0; i < lis.length;  i++ ) ie_hover( lis[i]  );
                                 for( var i = 0; i < divs.length; i++ ) ie_hover( divs[i] );
                         }
@@ -117,7 +117,7 @@ local function submenu(prefix, node)
                         href = (nnode.query) and href .. luci.http.build_querystring(nnode.query) or href
                 %>
                 <li>
-                       <span<% if nnode._menu_selected then %> class="active"<%end%>><a href="<%=href%>"><%=nnode.title%></a></span>
+                       <span<% if nnode._menu_selected then %> class="active"<%end%>><a href="<%=luci.util.pcdata(href)%>"><%=nnode.title%></a></span>
                         <%- submenu(prefix .. v.name .. "/", nnode) %>
                 </li>
                 <%- end %>
@@ -161,7 +161,7 @@ end
         <%
                 if tree.nodes[category] and tree.nodes[category].ucidata then
                         local ucic = 0
-                       for i, j in pairs(require("luci.model.uci").changes()) do
+                       for i, j in pairs(require("luci.model.uci").cursor():changes()) do
                                 for k, l in pairs(j) do
                                         for m, n in pairs(l) do
                                                 ucic = ucic + 1;