N°2847 - PopoverMenu: Fix quotes not being escaped in JS menu items

This commit is contained in:
Molkobain
2020-11-20 14:51:07 +01:00
parent b12dadb0dc
commit 1e7d4e5c31

View File

@@ -1,7 +1,7 @@
{% extends 'components/popover-menu/item/layout.html.twig' %}
{% block iboPopoverMenuItem %}
<a class="ibo-popover-menu--item" data-role="ibo-popover-menu--item" href="{{ oUIBlock.GetUrl() }}" onclick="{{ oUIBlock.GetJsCode() }}">
<a class="ibo-popover-menu--item" data-role="ibo-popover-menu--item" href="{{ oUIBlock.GetUrl() }}" onclick="{{ oUIBlock.GetJsCode()|escape }}">
{{ oUIBlock.GetLabel() }}
</a>
{% endblock %}