From b3d32e2bf3637488cfe2fc58a27a9d2475b2b51b Mon Sep 17 00:00:00 2001
From: Karson <karsonzhang@163.com>
Date: Mon, 19 Jul 2021 11:59:03 +0800
Subject: [PATCH] =?UTF-8?q?=E4=BF=AE=E5=A4=8D=E5=89=8D=E5=8F=B0URL?=
 =?UTF-8?q?=E8=B7=B3=E8=BD=AC=E8=BE=93=E5=87=BA?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 application/common/view/tpl/dispatch_jump.tpl | 4 ++--
 application/index/view/user/login.html        | 2 +-
 application/index/view/user/register.html     | 6 +++---
 3 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/application/common/view/tpl/dispatch_jump.tpl b/application/common/view/tpl/dispatch_jump.tpl
index fa2f32c3..50dd96d8 100755
--- a/application/common/view/tpl/dispatch_jump.tpl
+++ b/application/common/view/tpl/dispatch_jump.tpl
@@ -41,7 +41,7 @@
     <p class="clearfix">
         <a href="__PUBLIC__" class="btn btn-grey">{:__('Go back')}</a>
         {if $url}
-            <a href="{$url}" class="btn btn-primary">{:__('Jump now')}</a>
+            <a href="{$url|htmlentities}" class="btn btn-primary">{:__('Jump now')}</a>
         {/if}
     </p>
 </div>
@@ -52,7 +52,7 @@
             var interval = setInterval(function () {
                 var time = --wait.innerHTML;
                 if (time <= 0) {
-					location.href = "{$url}";
+					location.href = "{$url|htmlentities}";
                     clearInterval(interval);
                 }
             }, 1000);
diff --git a/application/index/view/user/login.html b/application/index/view/user/login.html
index 5c159261..5f4398c7 100755
--- a/application/index/view/user/login.html
+++ b/application/index/view/user/login.html
@@ -3,7 +3,7 @@
         <div class="logon-tab clearfix"><a class="active">{:__('Sign in')}</a> <a href="{:url('user/register')}?url={$url|urlencode}">{:__('Sign up')}</a></div>
         <div class="login-main">
             <form name="form" id="login-form" class="form-vertical" method="POST" action="">
-                <input type="hidden" name="url" value="{$url}"/>
+                <input type="hidden" name="url" value="{$url|htmlentities}"/>
                 {:token()}
                 <div class="form-group">
                     <label class="control-label" for="account">{:__('Account')}</label>
diff --git a/application/index/view/user/register.html b/application/index/view/user/register.html
index ac8ce6be..a62fa1c8 100644
--- a/application/index/view/user/register.html
+++ b/application/index/view/user/register.html
@@ -1,10 +1,10 @@
 <div id="content-container" class="container">
     <div class="user-section login-section">
         <div class="logon-tab clearfix"> <a href="{:url('user/login')}?url={$url|urlencode}">{:__('Sign in')}</a> <a class="active">{:__('Sign up')}</a> </div>
-        <div class="login-main"> 
+        <div class="login-main">
             <form name="form1" id="register-form" class="form-vertical" method="POST" action="">
                 <input type="hidden" name="invite_user_id" value="0" />
-                <input type="hidden" name="url" value="{$url}" />
+                <input type="hidden" name="url" value="{$url|htmlentities}" />
                 {:token()}
                 <div class="form-group">
                     <label class="control-label required">{:__('Email')}<span class="text-success"></span></label>
@@ -53,4 +53,4 @@
             </form>
         </div>
     </div>
-</div>
\ No newline at end of file
+</div>