From 1e7d4e5c3170730b7f26c2635d6589993a3971a5 Mon Sep 17 00:00:00 2001
From: Molkobain <lajarige.guillaume@free.fr>
Date: Fri, 20 Nov 2020 14:51:07 +0100
Subject: [PATCH] =?UTF-8?q?N=C2=B02847=20-=20PopoverMenu:=20Fix=20quotes?=
 =?UTF-8?q?=20not=20being=20escaped=20in=20JS=20menu=20items?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 templates/components/popover-menu/item/mode_js.html.twig | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/templates/components/popover-menu/item/mode_js.html.twig b/templates/components/popover-menu/item/mode_js.html.twig
index 834b79adce..a010cdfb01 100644
--- a/templates/components/popover-menu/item/mode_js.html.twig
+++ b/templates/components/popover-menu/item/mode_js.html.twig
@@ -1,7 +1,7 @@
 {% extends 'components/popover-menu/item/layout.html.twig' %}
 
 {% block iboPopoverMenuItem %}
-    <a class="ibo-popover-menu--item" data-role="ibo-popover-menu--item" href="{{ oUIBlock.GetUrl() }}" onclick="{{ oUIBlock.GetJsCode() }}">
+    <a class="ibo-popover-menu--item" data-role="ibo-popover-menu--item" href="{{ oUIBlock.GetUrl() }}" onclick="{{ oUIBlock.GetJsCode()|escape }}">
         {{ oUIBlock.GetLabel() }}
     </a>
 {% endblock %}