pkp/pkp-lib#9283 Correctly escape special characters in issue title (…

…stable-3_4_0)
pkp · Sep 7, 2023 · 66927de · 66927de
1 parent bff3831
commit 66927de
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/controllers/grid/issues/IssueGridCellProvider.php b/controllers/grid/issues/IssueGridCellProvider.php
@@ -58,7 +58,7 @@ public function getCellActions($request, $row, $column, $position = GridHandler:
                     'edit',
                     new AjaxModal(
                         $router->url($request, null, null, 'editIssue', null, ['issueId' => $issue->getId()]),
-                        __('editor.issues.editIssue', ['issueIdentification' => $issue->getIssueIdentification()]),
+                        __('editor.issues.editIssue', ['issueIdentification' => htmlspecialchars($issue->getIssueIdentification())]),
                         'modal_edit',
                         true
                     ),

diff --git a/controllers/grid/issues/IssueGridRow.php b/controllers/grid/issues/IssueGridRow.php
@@ -50,7 +50,7 @@ public function initialize($request, $template = null)
                     'edit',
                     new AjaxModal(
                         $router->url($request, null, null, 'editIssue', null, ['issueId' => $issueId]),
-                        __('editor.issues.editIssue', ['issueIdentification' => $issue->getIssueIdentification()]),
+                        __('editor.issues.editIssue', ['issueIdentification' => htmlspecialchars($issue->getIssueIdentification())]),
                         'modal_edit',
                         true
                     ),