From fed075840b894375b7f744765bb85d6c3530bc32 Mon Sep 17 00:00:00 2001
From: Axel Guckelsberger <info@guite.de>
Date: Mon, 30 Aug 2021 19:13:31 +0200
Subject: [PATCH] sanitize page title in breadcrumb shown on edit page

---
 .../Zikula/ContentModule/Twig/CustomTwigExtension.php           | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/extensions/Zikula/ContentModule/Twig/CustomTwigExtension.php b/src/extensions/Zikula/ContentModule/Twig/CustomTwigExtension.php
index 2186d4fad..4b5609208 100644
--- a/src/extensions/Zikula/ContentModule/Twig/CustomTwigExtension.php
+++ b/src/extensions/Zikula/ContentModule/Twig/CustomTwigExtension.php
@@ -155,7 +155,7 @@ public function getPagePath($page, bool $linkPages = true): string
 
         $output = '<ol class="breadcrumb">';
         foreach ($pages as $aPage) {
-            $content = $aPage['title'];
+            $content = htmlspecialchars($aPage['title']);
             if (true === $linkPages) {
                 $link = $this->router->generate('zikulacontentmodule_page_display', ['slug' => $aPage['slug']]);
                 $titleAttribute = ' title="' . str_replace('"', '', $content) . '"';