From fe69675b535402d2e6ac612ff642217ed24dd096 Mon Sep 17 00:00:00 2001 From: "vincent@cubedesigners.com" Date: Thu, 23 Aug 2018 10:10:00 +0000 Subject: [PATCH] fix #2091 @0.25 --- inc/ws/Util/html5/master/class.ws.html5.links.php | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/inc/ws/Util/html5/master/class.ws.html5.links.php b/inc/ws/Util/html5/master/class.ws.html5.links.php index 5914e4934..2a8efc7e5 100644 --- a/inc/ws/Util/html5/master/class.ws.html5.links.php +++ b/inc/ws/Util/html5/master/class.ws.html5.links.php @@ -413,7 +413,7 @@ class textPopupLink extends normalLink public function getAdditionnalContent() { $res = parent::getAdditionnalContent(); - $res .= ' data-text="' . $this->infobulle . '" '; + $res .= ' data-text="' . htmlspecialchars($this->infobulle, ENT_QUOTES) . '" '; return $res; } @@ -1377,7 +1377,7 @@ class inpesPopinLink extends htmlMultimediaLink $tooltip = ''; $t = $this->getTooltip(); if ($t !== false) { - $tooltip = ' data-tooltip="' . $t . '"'; + $tooltip = ' data-tooltip="' . htmlspecialchars($t, ENT_QUOTES) . '"'; } return 'getAdditionnalContent() . '>'; } -- 2.39.5