Fixed issue #17734: Unable to use quote inside relevance of subquestion

Dev: use escape('html_attr') since it's an attribute
LimeSurvey · Nov 19, 2021 · 37da642 · 37da642
1 parent 2aafaa9
commit 37da642
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/application/views/questionAdministration/subquestionRow.twig b/application/views/questionAdministration/subquestionRow.twig
@@ -139,7 +139,7 @@
                 class='relevance form-control input'
                 id='subquestions[{{ subquestion.qid }}][{{ scale_id }}][relevance]'
                 name='subquestions[{{ subquestion.qid }}][{{ scale_id }}][relevance]'
-                value="{{ subquestion.relevance }}"
+                value="{{ subquestion.relevance|escape('html_attr') }}"
                 onkeypress=" if(event.keyCode==13) { if (event && event.preventDefault) event.preventDefault(); document.getElementById('save-button').click(); return false;}"
             />
         </td>