Merge pull request #551 from skipperbent/v3-development

Version 3.19.2
skipperbent · May 17, 2024 · 14d8f40 · 14d8f40
2 parents 34f3270 + 08b4d49
commit 14d8f40
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/src/UI/Taglib/TaglibJs.php b/src/UI/Taglib/TaglibJs.php
@@ -2,6 +2,7 @@
 
 namespace Pecee\UI\Taglib;
 
+use Pecee\Str;
 use Pecee\UI\Phtml\Phtml;
 
 class TaglibJs extends Taglib
@@ -539,7 +540,7 @@ protected function tagInclude(\stdClass $attrs): string
 
         $content = file_get_contents('views/snippets/' . $attrs->file, FILE_USE_INCLUDE_PATH);
         if ($content !== false) {
-            return (new Phtml())->read($content)->toPHP();
+            return Str::sanitizeHtml((new Phtml())->read($content)->toPHP());
         }
 
         return '';