better escape

hermawanramadhan · May 25, 2022 · b3ffc89 · b3ffc89
1 parent 2f35485
commit b3ffc89
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/src/DataTableQuery.php b/src/DataTableQuery.php
@@ -72,6 +72,10 @@ public function getDataResult()
 
         foreach ($queryResult as $row) 
         {
+            //escaping all
+            foreach($row as $key => $val)
+                $row->$key = esc($val);
+
             $data    = [];
             $columns = $this->columnDefs->getColumns();
 
@@ -98,7 +102,7 @@ public function getDataResult()
                         break;
 
                     default:
-                        $value = esc($row->{$column->alias}); // Escape all other data if not used in formatting types
+                        $value = $row->{$column->alias};
                         break;
                 }