mirror of
https://github.com/Part-DB/Part-DB-server.git
synced 2026-03-18 13:18:31 +01:00
Properly escape user provided data in trans with data to prevent possible XSS attack vectors.
This commit is contained in:
@@ -67,7 +67,7 @@ class PartDataTableHelper
|
||||
'<a href="%s">%s%s</a>',
|
||||
$this->entityURLGenerator->infoURL($context),
|
||||
$icon,
|
||||
htmlentities($context->getName())
|
||||
htmlspecialchars($context->getName())
|
||||
);
|
||||
}
|
||||
|
||||
|
||||
Reference in New Issue
Block a user