Update wcfsetup/install/files/lib/system/gridView/admin/SmileyGridView.class.php

Cyperghost · BurntimeX · web-flow · commit c3e9c528bba0 · 2025-03-26T17:53:21.000+01:00
Co-authored-by: Marcel Werk &lt;burntime@woltlab.com&gt;
diff --git a/wcfsetup/install/files/lib/system/gridView/admin/SmileyGridView.class.php b/wcfsetup/install/files/lib/system/gridView/admin/SmileyGridView.class.php
@@ -81,7 +81,7 @@ public function render(mixed $value, DatabaseObject $row): string
 
                             $aliases = '';
                             foreach ($row->getAliases() as $alias) {
-                                $aliases .= '<span class="badge" style="margin-left: 5px">' . $alias . '</span>';
+                                $aliases .= '<span class="badge" style="margin-left: 5px">' . StringUtil::encodeHTML($alias) . '</span>';
                             }
 
                             return $aliases;

Original file line number	Diff line number	Diff line change
`@@ -81,7 +81,7 @@ public function render(mixed $value, DatabaseObject $row): string`
`81`	`81`
`82`	`82`	`$aliases = '';`
`83`	`83`	`foreach ($row->getAliases() as $alias) {`
`84`		`- $aliases .= '<span class="badge" style="margin-left: 5px">' . $alias . '</span>';`
	`84`	`+ $aliases .= '<span class="badge" style="margin-left: 5px">' . StringUtil::encodeHTML($alias) . '</span>';`
`85`	`85`	`}`
`86`	`86`
`87`	`87`	`return $aliases;`