Merge pull request #2185 from jpty/patch-1

Process html special character for tooltips and command's value
jeedom · Mar 25, 2023 · 1c9ff80 · 1c9ff80
2 parents 0db2db2 + 8545766
commit 1c9ff80
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/desktop/modal/eqLogic.configure.php b/desktop/modal/eqLogic.configure.php
@@ -143,7 +143,7 @@
                 $display .= '<td><span class="label label-sm label-' . (($cmd->getType() == 'action') ? 'warning' : 'primary') . '">' . $cmd->getType() . '</span> <span class="label label-sm label-info">' . $cmd->getSubtype() . '</span></td>';
                 $display .= '<td>';
                 if ($cmd->getType() == 'info') {
-                  $value = $cmd->execCmd();
+                  $value = htmlspecialchars($cmd->execCmd());
                   $title = '{{Date de valeur}} : ' . $cmd->getValueDate() . '<br>{{Date de collecte}} : ' .  $cmd->getCollectDate();
                   if (strlen($value) > 50) {
                     $title .= '<br>{{Valeur}} : ' . $value;