FIX prevent death on urls with querystrings & anchors

silverstripe · Jan 29, 2019 · 0491ca0 · 0491ca0
1 parent 5f69063
commit 0491ca0
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/View/Parsers/ShortcodeParser.php b/src/View/Parsers/ShortcodeParser.php
@@ -476,7 +476,7 @@ protected function replaceAttributeTagsWithContent($htmlvalue)
 
             if ($tags) {
                 $node->nodeValue = $this->replaceTagsWithText(
-                    $node->nodeValue,
+                    htmlspecialchars($node->nodeValue),
                     $tags,
                     function ($idx, $tag) use ($parser, $extra) {
                         return $parser->getShortcodeReplacementText($tag, $extra, false);