HTML encoding in file control

inkvizytor · May 10, 2021 · d8eaa5f · d8eaa5f
1 parent 04f938c
commit d8eaa5f
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/Controls/File.php b/src/Controls/File.php
@@ -57,7 +57,7 @@ public function render()
                 'title' => trans('fluentform::controls.file.delete')
             ]));
             $content .= ' ';
-            $content .= '<a href="'.$value.'" target="_blank">'.basename($value).'</a>';
+            $content .= '<a href="'.$this->html()->encode($value).'" target="_blank">'.basename($this->html()->encode($value)).'</a>';
             $content .= '</div>';
         }