sanitize page title in breadcrumb shown on edit page

zikula-modules · Aug 30, 2021 · fed0758 · fed0758
1 parent 9630ff3
commit fed0758
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/extensions/Zikula/ContentModule/Twig/CustomTwigExtension.php b/src/extensions/Zikula/ContentModule/Twig/CustomTwigExtension.php
@@ -155,7 +155,7 @@ public function getPagePath($page, bool $linkPages = true): string
 
         $output = '<ol class="breadcrumb">';
         foreach ($pages as $aPage) {
-            $content = $aPage['title'];
+            $content = htmlspecialchars($aPage['title']);
             if (true === $linkPages) {
                 $link = $this->router->generate('zikulacontentmodule_page_display', ['slug' => $aPage['slug']]);
                 $titleAttribute = ' title="' . str_replace('"', '', $content) . '"';