Team v.2.2.2

webasyst · Oct 19, 2023 · 010c33a · 010c33a
1 parent a07c34b
commit 010c33a
Show file tree

Hide file tree

Showing 3 changed files with 4 additions and 5 deletions.
diff --git a/wa-apps/team/lib/config/app.php b/wa-apps/team/lib/config/app.php
@@ -2,7 +2,7 @@
 return array(
     'name'       => 'Team',
     'icon'       => 'img/team.svg',
-    'version'    => '2.2.1',
+    'version'    => '2.2.2',
     'vendor'     => 'webasyst',
     'sash_color' => '#f0dc03',
     'system'     => true,

diff --git a/wa-apps/team/lib/handlers/contacts.profile.tab.handler.php b/wa-apps/team/lib/handlers/contacts.profile.tab.handler.php
@@ -3,8 +3,7 @@ class teamContactsProfileTabHandler extends waEventHandler
 {
     public function execute(&$params)
     {
-        $contact_id = $params;
-        $contact = new waContact($contact_id);
+        $contact_id = (is_array($params) ? ifset($params, 'id', 0) : $params);
 
         $is_superadmin = wa()->getUser()->isAdmin();
         $is_own_profile = wa()->getUser()->getId() == $contact_id;

diff --git a/wa-apps/team/templates/actions/profile/Profile.html b/wa-apps/team/templates/actions/profile/Profile.html
@@ -292,12 +292,12 @@ <h3 class="js-username custom-mb-8">
                     {if !empty($user.phone)}
                     {foreach $user.phone as $key => $phone}
                     <div class="t-profile-block">
-                        <a href="tel:{$phone.value}" class="t-profile-block__icon">
+                        <a href="tel:{$phone.value|escape}" class="t-profile-block__icon">
                             <i class="fas fa-phone-alt text-green"></i>
                         </a>
 
                         <div class="t-profile-block__value">
-                            <a href="tel:{$phone.value}" title="{$phone.value}" class="t-profile-block__value-link">
+                            <a href="tel:{$phone.value|escape}" title="{$phone.value|escape}" class="t-profile-block__value-link">
                                 {if isset($fieldValues['phone'][$key]['value'])}
                                     {$fieldValues['phone'][$key]['value']|escape}
                                 {else}