Merge pull request #27 from gngn23/master

Summary tab: Escape with htmlspecialchars().
systopia · Sep 21, 2024 · cec17fe · cec17fe
2 parents 1df5a19 + ab8ba81
commit cec17fe
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/CRM/Gdprx/Page/SummaryTab.php b/CRM/Gdprx/Page/SummaryTab.php
@@ -67,10 +67,10 @@ public function run() {
         'record_source'      => $data->record_source,
         'record_type'        => $data->record_type,
         'record_terms_name'  => $data->record_terms_name,
-        'record_terms_full'  => $data->record_terms_full,
+        'record_terms_full'  => htmlspecialchars($data->record_terms_full),
         'record_terms_id'    => $data->record_terms_id,
         'record_note_short'  => mb_strlen($data->record_note) > 16 ? (substr($data->record_note, 0, 13) . '...') : $data->record_note,
-        'record_note'        => $data->record_note,
+        'record_note'        => htmlspecialchars($data->record_note),
       );
     }