Escape grid identification in grid -- rich titles not supported (yet)

pkp · Dec 7, 2024 · 89dc377 · 89dc377
1 parent 5c44f17
commit 89dc377
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/controllers/grid/issues/IssueGridCellProvider.php b/controllers/grid/issues/IssueGridCellProvider.php
@@ -63,7 +63,7 @@ public function getCellActions($request, $row, $column, $position = GridHandler:
                         null,
                         true
                     ),
-                    $issue->getIssueIdentification()
+                    htmlspecialchars($issue->getIssueIdentification())
                 )
             ];
         }