Fix Xss in the Search Documents

pimcore · Jul 17, 2023 · 92811f0 · 92811f0
1 parent 43e8013
commit 92811f0
Showing 1 changed file with 10 additions and 1 deletion.
diff --git a/bundles/AdminBundle/Resources/public/js/pimcore/element/selector/document.js b/bundles/AdminBundle/Resources/public/js/pimcore/element/selector/document.js
@@ -199,7 +199,16 @@ pimcore.element.selector.document = Class.create(pimcore.element.selector.abstra
                 {text: 'ID', width: 40, sortable: true, dataIndex: 'id', hidden: true},
                 {text: t("published"), width: 40, sortable: true, dataIndex: 'published', hidden: true},
                 {text: t("path"), flex: 200, sortable: true, dataIndex: 'fullpath'},
-                {text: t("title"), flex: 200, sortable: false, dataIndex: 'title', hidden: false},
+                {
+                    text: t("title"),
+                    flex: 200,
+                    sortable: false,
+                    dataIndex: 'title',
+                    hidden: false,
+                    renderer: function (value) {
+                        return Ext.util.Format.htmlEncode(value);
+                    }
+                },
                 {text: t("description"), width: 200, sortable: false, dataIndex: 'description', hidden: true},
                 {text: t("filename"), width: 200, sortable: true, dataIndex: 'filename', hidden: true}
             ];