[BUGFIX] Label in list view is not escaped 17/13817/7
authorNicole Cordes <typo3@cordes.co>
Fri, 5 Apr 2013 20:15:24 +0000 (22:15 +0200)
committerStefan Neufeind <typo3.neufeind@speedpartner.de>
Sun, 5 May 2013 11:30:41 +0000 (13:30 +0200)
commitd72a23d1dcbfe378f1828778dd22472e815b0947
tree6ace3c7c17b9c3370ccfe433ad9b21ba054b6246
parent24f83ec5af85a01045f5fd3efb81514f38d409f7
[BUGFIX] Label in list view is not escaped

The label of a field in the list view is not escaped,
as the itemLabel function is broken, through the
third parameter which cannot be HSCed afterwards
if it contains HTML.

Change-Id: I5adcf0ce97dd9f5e8fd9546b367f55f1ac0c532e
Fixes: #29409
Releases: 6.2, 6.1, 6.0
Reviewed-on: https://review.typo3.org/13817
Reviewed-by: Philipp Gampe
Tested-by: Philipp Gampe
Reviewed-by: Stefan Neufeind
Tested-by: Stefan Neufeind
typo3/sysext/backend/Classes/Utility/BackendUtility.php
typo3/sysext/recordlist/Classes/RecordList/DatabaseRecordList.php