Fix #19462: Fix validator client options to encode HTML tags

This commit is contained in:
Bizley
2022-07-29 12:15:54 +02:00
committed by GitHub
parent 009961963c
commit 59f69fc9cd
13 changed files with 52 additions and 11 deletions

View File

@@ -8,6 +8,7 @@
namespace yii\validators;
use Yii;
use yii\helpers\Json;
use yii\web\UploadedFile;
/**
@@ -166,7 +167,7 @@ class ImageValidator extends FileValidator
{
ValidationAsset::register($view);
$options = $this->getClientOptions($model, $attribute);
return 'yii.validation.image(attribute, messages, ' . json_encode($options, JSON_UNESCAPED_SLASHES | JSON_UNESCAPED_UNICODE) . ', deferred);';
return 'yii.validation.image(attribute, messages, ' . Json::htmlEncode($options) . ', deferred);';
}
/**