Skip to content

Ensure html attributes are escaped in templates#7

Open
colemanw wants to merge 1 commit intocircleinteractive:masterfrom
colemanw:escape-htmlattribute
Open

Ensure html attributes are escaped in templates#7
colemanw wants to merge 1 commit intocircleinteractive:masterfrom
colemanw:escape-htmlattribute

Conversation

@colemanw
Copy link

This adds escape='htmlattribute' to all translations within tags, which ensures any special characters in the translated string
are properly escaped and don't break out of the quotes or cause other problems.

See civicrm/civicrm-core#26792

Note: This requires CiviCRM 5.65 at minimum.

This adds escape='htmlattribute' to all translations within tags, which ensures any special characters in the translated string
are properly escaped and don't break out of the quotes or cause other problems.

See civicrm/civicrm-core#26792

Note: This requires CiviCRM 5.65 at minimum.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant