Skip to content
Permalink
Browse files Browse the repository at this point in the history
Fixed an XSS vulnerability
  • Loading branch information
brandonkelly committed Jul 28, 2022
1 parent 3210cf7 commit 1d5fdba
Show file tree
Hide file tree
Showing 4 changed files with 6 additions and 3 deletions.
3 changes: 3 additions & 0 deletions CHANGELOG.md
Expand Up @@ -9,6 +9,9 @@
### Fixed
- Fixed a bug where system messages provided by Yii weren’t getting translated in some cases. ([#11712](https://github.com/craftcms/cms/issues/11712))

### Security
- Fixed an XSS vulnerability.

## 3.7.49 - 2022-07-26

### Added
Expand Down
2 changes: 1 addition & 1 deletion src/web/assets/cp/dist/cp.js

Large diffs are not rendered by default.

2 changes: 1 addition & 1 deletion src/web/assets/cp/dist/cp.js.map

Large diffs are not rendered by default.

2 changes: 1 addition & 1 deletion src/web/assets/cp/src/js/BaseElementSelectInput.js
Expand Up @@ -471,7 +471,7 @@ Craft.BaseElementSelectInput = Garnish.Base.extend(
createNewElement: function (elementInfo) {
var $element = elementInfo.$element.clone();
var removeText = Craft.t('app', 'Remove {label}', {
label: elementInfo.label,
label: Craft.escapeHtml(elementInfo.label),
});
// Make a couple tweaks
Craft.setElementSize(
Expand Down

0 comments on commit 1d5fdba

Please sign in to comment.