[BUGFIX] Add missing hsc() for WS title
authorTolleiv Nietsch <info@tolleiv.de>
Fri, 4 Mar 2011 13:35:08 +0000 (08:35 -0500)
committerTolleiv Nietsch <info@tolleiv.de>
Fri, 4 Mar 2011 13:35:08 +0000 (08:35 -0500)
Change-Id: I3a58865b6502ed71385dbff56013f3b5564240d2
Resolves: #13551

typo3/sysext/workspaces/Classes/BackendUserInterface/WorkspaceSelectorToolbarItem.php

index e4b1a15..d58b40c 100644 (file)
@@ -62,7 +62,7 @@ class WorkspaceSelectorToolbarItem implements backend_toolbarItem {
                $this->changeWorkspacePreview = t3lib_div::_GP('changeWorkspacePreview');
 
                $pageRenderer = t3lib_div::makeInstance('t3lib_pageRenderer');
-               $this->backendReference->addJavaScript("TYPO3.Workspaces = { workspaceTitle : '" . tx_Workspaces_Service_Workspaces::getWorkspaceTitle($GLOBALS['BE_USER']->workspace) . "'};\n");
+               $this->backendReference->addJavaScript("TYPO3.Workspaces = { workspaceTitle : '" . htmlspecialchars(tx_Workspaces_Service_Workspaces::getWorkspaceTitle($GLOBALS['BE_USER']->workspace)) . "'};\n");
        }
 
        /**