From 0491ca03cfcbd81690c54cc00f6234675978ef39 Mon Sep 17 00:00:00 2001 From: mikeyc7m Date: Wed, 12 Dec 2018 17:40:51 +1100 Subject: [PATCH] FIX prevent death on urls with querystrings & anchors --- src/View/Parsers/ShortcodeParser.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/View/Parsers/ShortcodeParser.php b/src/View/Parsers/ShortcodeParser.php index 0a70ea08906..e51cdd12e44 100644 --- a/src/View/Parsers/ShortcodeParser.php +++ b/src/View/Parsers/ShortcodeParser.php @@ -476,7 +476,7 @@ protected function replaceAttributeTagsWithContent($htmlvalue) if ($tags) { $node->nodeValue = $this->replaceTagsWithText( - $node->nodeValue, + htmlspecialchars($node->nodeValue), $tags, function ($idx, $tag) use ($parser, $extra) { return $parser->getShortcodeReplacementText($tag, $extra, false);