[BUGFIX] Label in list view is not escaped 09/20509/3
authorNicole Cordes <typo3@cordes.co>
Fri, 5 Apr 2013 20:15:24 +0000 (22:15 +0200)
committerWouter Wolters <typo3@wouterwolters.nl>
Sat, 11 May 2013 15:48:11 +0000 (17:48 +0200)
commit3924a48a1635d5159e621b3829bbcd2375955e69
treed374f8b4297037b14fbb0df3d9386927c3eac9b6
parent748880253393cbd3602d27e15810f9f0df1bddf5
[BUGFIX] Label in list view is not escaped

The label of a field in the list view is not escaped,
as the itemLabel function is broken, through the
third parameter which cannot be HSCed afterwards
if it contains HTML.

Change-Id: I5adcf0ce97dd9f5e8fd9546b367f55f1ac0c532e
Fixes: #29409
Releases: 6.2, 6.1, 6.0
Reviewed-on: https://review.typo3.org/20509
Reviewed-by: Nicole Cordes
Tested-by: Nicole Cordes
Reviewed-by: Wouter Wolters
Tested-by: Wouter Wolters
typo3/sysext/backend/Classes/Utility/BackendUtility.php
typo3/sysext/recordlist/Classes/RecordList/DatabaseRecordList.php