[BUGFIX] Label in list view is not escaped 08/20508/3
authorNicole Cordes <typo3@cordes.co>
Fri, 5 Apr 2013 20:15:24 +0000 (22:15 +0200)
committerWouter Wolters <typo3@wouterwolters.nl>
Sat, 11 May 2013 15:47:37 +0000 (17:47 +0200)
commit1a7af75f635a1e3711c404f50037c7f48da0e4c8
treeea8ff599f1d3a776850af5f485a2a0addd22a248
parent5c69f74315d6042cdcbed68caa54c6bf7379e06b
[BUGFIX] Label in list view is not escaped

The label of a field in the list view is not escaped,
as the itemLabel function is broken, through the
third parameter which cannot be HSCed afterwards
if it contains HTML.

Change-Id: I5adcf0ce97dd9f5e8fd9546b367f55f1ac0c532e
Fixes: #29409
Releases: 6.2, 6.1, 6.0
Reviewed-on: https://review.typo3.org/20508
Reviewed-by: Nicole Cordes
Tested-by: Nicole Cordes
Reviewed-by: Wouter Wolters
Tested-by: Wouter Wolters
typo3/sysext/backend/Classes/Utility/BackendUtility.php
typo3/sysext/recordlist/Classes/RecordList/DatabaseRecordList.php