From: Jakub Vrana <jakub@vrana.cz>
Date: Fri, 12 Jan 2018 13:49:55 +0000 (+0100)
Subject: Use <script> instead of inline event handler in print_fieldset()
X-Git-Tag: v4.4.0~52
X-Git-Url: https://git.joonet.de/?a=commitdiff_plain;h=6b2ba650847cfff5ad96c8bd552b22738aadf95b;p=adminer.git

Use <script> instead of inline event handler in print_fieldset()
---

diff --git a/adminer/include/functions.inc.php b/adminer/include/functions.inc.php
index abe934a0..475953f9 100644
--- a/adminer/include/functions.inc.php
+++ b/adminer/include/functions.inc.php
@@ -200,11 +200,14 @@ function confirm($selector = "qsl('input')") {
 * @param string
 * @param string
 * @param bool
-* @param string
 * @return null
 */
-function print_fieldset($id, $legend, $visible = false, $onclick = "") {
-	echo "<fieldset><legend><a href='#fieldset-$id' onclick=\"" . h($onclick) . "return toggle('fieldset-$id');\">$legend</a></legend><div id='fieldset-$id'" . ($visible ? "" : " class='hidden'") . ">\n";
+function print_fieldset($id, $legend, $visible = false) {
+	echo "<fieldset><legend>";
+	echo "<a href='#fieldset-$id'>$legend</a>";
+	echo "<script>qsl('a').onclick = partial(toggle, 'fieldset-$id');</script>";
+	echo "</legend>";
+	echo "<div id='fieldset-$id'" . ($visible ? "" : " class='hidden'") . ">\n";
 }
 
 /** Return class='active' if $bold is true