[BUGFIX] Do not render HTML in Install Tool's flash message 35/50235/3
authorAndreas Fernandez <a.fernandez@scripting-base.de>
Sun, 16 Oct 2016 17:50:46 +0000 (19:50 +0200)
committerStefan Neufeind <typo3.neufeind@speedpartner.de>
Mon, 17 Oct 2016 16:00:18 +0000 (18:00 +0200)
This patch avoids rendering HTML tags in the flash messages of changes
that may be stored in the input fields of "All configuration".

Resolves: #78308
Related: #73143
Releases: master
Change-Id: I8f9e83684198ede3386b879035220f4888ba6d98
Reviewed-on: https://review.typo3.org/50235
Tested-by: TYPO3com <no-reply@typo3.com>
Reviewed-by: Frank Naegler <frank.naegler@typo3.org>
Reviewed-by: Stefan Neufeind <typo3.neufeind@speedpartner.de>
Tested-by: Stefan Neufeind <typo3.neufeind@speedpartner.de>
typo3/sysext/install/Resources/Private/Partials/Action/Common/StatusMessage.html

index e215537..da22500 100644 (file)
@@ -23,6 +23,6 @@
 </f:switch>
        <h4>{message.title}</h4>
        <f:if condition="{message.message}">
-               <p class="messageText">{message.message -> f:format.nl2br() -> f:format.raw()}</p>
+               <p class="messageText">{message.message -> f:format.nl2br()}</p>
        </f:if>
 </div>