Prevent XSS through dashboard grid items id

glpi-project · Apr 5, 2023 · 53f2674 · 53f2674
1 parent 965f18b
commit 53f2674
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/src/Dashboard/Grid.php b/src/Dashboard/Grid.php
@@ -620,6 +620,8 @@ public function addGridItem(
         $edit_label    = __("Edit this card");
         $delete_label  = __("Delete this card");
 
+        $gridstack_id = htmlspecialchars($gridstack_id);
+
         $this->items[] = <<<HTML
          <div class="grid-stack-item"
                gs-id="{$gridstack_id}"