From 1e916e7d668c9e47b217e20cc0ea4812f466201b Mon Sep 17 00:00:00 2001
From: Jia Jia Ji <kingjia90@gmail.com>
Date: Mon, 19 Sep 2022 13:06:22 +0200
Subject: [PATCH] Task: escape `path` column in Users > Workspaces

---
 .../public/js/pimcore/settings/user/workspace/asset.js         | 1 +
 .../public/js/pimcore/settings/user/workspace/document.js      | 3 ++-
 .../public/js/pimcore/settings/user/workspace/object.js        | 1 +
 3 files changed, 4 insertions(+), 1 deletion(-)

diff --git a/bundles/AdminBundle/Resources/public/js/pimcore/settings/user/workspace/asset.js b/bundles/AdminBundle/Resources/public/js/pimcore/settings/user/workspace/asset.js
index fa7053947ee..9d498355cde 100644
--- a/bundles/AdminBundle/Resources/public/js/pimcore/settings/user/workspace/asset.js
+++ b/bundles/AdminBundle/Resources/public/js/pimcore/settings/user/workspace/asset.js
@@ -34,6 +34,7 @@ pimcore.settings.user.workspace.asset = Class.create({
         var typesColumns = [
             {text: t("path"), width: 200, sortable: false, dataIndex: 'path',
                         editor: new Ext.form.TextField({}),
+                        renderer: Ext.util.Format.htmlEncode,
                         tdCls: "pimcore_property_droptarget"
             }
         ];
diff --git a/bundles/AdminBundle/Resources/public/js/pimcore/settings/user/workspace/document.js b/bundles/AdminBundle/Resources/public/js/pimcore/settings/user/workspace/document.js
index e76483d00b1..8b14ccf9ee4 100644
--- a/bundles/AdminBundle/Resources/public/js/pimcore/settings/user/workspace/document.js
+++ b/bundles/AdminBundle/Resources/public/js/pimcore/settings/user/workspace/document.js
@@ -35,7 +35,8 @@ pimcore.settings.user.workspace.document = Class.create({
         var typesColumns = [
             {text: t("path"), width: 200, sortable: false, dataIndex: 'path',
                     editor: new Ext.form.TextField({}),
-                tdCls: "pimcore_property_droptarget"
+                    renderer: Ext.util.Format.htmlEncode,
+                    tdCls: "pimcore_property_droptarget"
             }
         ];
 
diff --git a/bundles/AdminBundle/Resources/public/js/pimcore/settings/user/workspace/object.js b/bundles/AdminBundle/Resources/public/js/pimcore/settings/user/workspace/object.js
index 8d6b146a01a..8f471caa174 100644
--- a/bundles/AdminBundle/Resources/public/js/pimcore/settings/user/workspace/object.js
+++ b/bundles/AdminBundle/Resources/public/js/pimcore/settings/user/workspace/object.js
@@ -36,6 +36,7 @@ pimcore.settings.user.workspace.object = Class.create({
         var typesColumns = [
             {text: t("path"), width: 200, sortable: false, dataIndex: 'path',
                                 editor: new Ext.form.TextField({}),
+                                renderer: Ext.util.Format.htmlEncode,
                                 tdCls: "pimcore_property_droptarget"
             }
         ];