| 358 |
selected = 'selected'; |
selected = 'selected'; |
| 359 |
} |
} |
| 360 |
var value = arr[i]; |
var value = arr[i]; |
| 361 |
str += "<option value='" + i + "' " + selected + ">" + value + "</option>"; |
str += "<option value='" + String(i).htmlspecialchars() + "' " + selected + ">" + String(value).escapeHTML() + "</option>"; |
| 362 |
} |
} |
| 363 |
return str; |
return str; |
| 364 |
} |
} |
| 369 |
var options = select.options; |
var options = select.options; |
| 370 |
options.length = 0; |
options.length = 0; |
| 371 |
options[options.length] = new Option(); |
options[options.length] = new Option(); |
| 372 |
|
if (arr.length == 0) { |
| 373 |
|
return; |
| 374 |
|
} |
| 375 |
|
|
| 376 |
for (var i in arr) { |
for (var i in arr) { |
| 377 |
var value = arr[i] |
var value = arr[i] |
| 378 |
var option = new Option(value, i); |
var option = new Option(value, i); |
| 383 |
|
|
| 384 |
function createCheckboxTag(name, value, label, checked) |
function createCheckboxTag(name, value, label, checked) |
| 385 |
{ |
{ |
| 386 |
var str = "<label><input type='checkbox' name='" + name + "' value='" + value + "'"; |
var str = "<label><input type='checkbox' name='" + name + "' value='" + String(value).htmlspecialchars() + "'"; |
| 387 |
if (checked) { |
if (checked) { |
| 388 |
str += " checked"; |
str += " checked"; |
| 389 |
} |
} |
| 390 |
str += ">" + label + "</label>"; |
str += ">" + String(label).escapeHTML() + "</label>"; |
| 391 |
return str; |
return str; |
| 392 |
} |
} |
| 393 |
|
|
| 406 |
checked = 'checked'; |
checked = 'checked'; |
| 407 |
} |
} |
| 408 |
} |
} |
| 409 |
str += "<label><input type='checkbox' name='" + name + "[]' value='" + i + "' " + checked + ">" + arr[i] + "</label>"; |
str += "<label><input type='checkbox' name='" + name + "[]' value='" + i.htmlspecialchars() + "' " + checked + ">" + arr[i].escapeHTML() + "</label>"; |
| 410 |
str += separator; |
str += separator; |
| 411 |
} |
} |
| 412 |
return str; |
return str; |
| 627 |
return c; |
return c; |
| 628 |
} |
} |
| 629 |
|
|
| 630 |
|
// http://serennz.sakura.ne.jp/sb/log/eid73.html |
| 631 |
|
String.prototype.htmlspecialchars = function() { |
| 632 |
|
ch = this + ""; |
| 633 |
|
ch = ch.replace(/&/g,"&") ; |
| 634 |
|
ch = ch.replace(/"/g,""") ; |
| 635 |
|
ch = ch.replace(/'/g,"'") ; |
| 636 |
|
ch = ch.replace(/</g,"<") ; |
| 637 |
|
ch = ch.replace(/>/g,">") ; |
| 638 |
|
return ch ; |
| 639 |
|
} |
| 640 |
|
|