Commit 58faf135 authored by Nicole Cordes's avatar Nicole Cordes Committed by Markus Klein
Browse files

[FOLLOWUP][BUGFIX] Correct record title escaping

This patch corrects the IRRE header for sys_file_references.

Resolves: #77248
Related: #76399
Related: #76668
Related: #76900
Releases: master, 7.6
Change-Id: Ic0791d71b7ff5aa3e9caf098ea75fa254efa6c4b
Reviewed-on: https://review.typo3.org/49206

Reviewed-by: Wouter Wolters's avatarWouter Wolters <typo3@wouterwolters.nl>
Tested-by: Wouter Wolters's avatarWouter Wolters <typo3@wouterwolters.nl>
Tested-by: default avatarBamboo TYPO3com <info@typo3.com>
Reviewed-by: Markus Klein's avatarMarkus Klein <markus.klein@typo3.org>
Tested-by: Markus Klein's avatarMarkus Klein <markus.klein@typo3.org>
parent 4134a278
......@@ -263,7 +263,7 @@ class InlineRecordContainer extends AbstractContainer
$markup[] = ' </span>';
$markup[] = ' </div>';
$markup[] = ' <div class="media-body">';
$markup[] = ' <div class="alert-message">' . htmlspecialchars($message) . '</div>';
$markup[] = ' <div class="alert-message">' . htmlspecialchars($message) . '</div>';
$markup[] = ' </div>';
$markup[] = ' </div>';
$markup[] = '</div>';
......@@ -306,7 +306,10 @@ class InlineRecordContainer extends AbstractContainer
$recordTitle = $data['recordTitle'];
if (!empty($recordTitle)) {
$recordTitle = BackendUtility::getRecordTitlePrep($recordTitle);
// The user function may return HTML, therefore we can't escape it
if (empty($data['processedTca']['ctrl']['formattedLabel_userFunc'])) {
$recordTitle = BackendUtility::getRecordTitlePrep($recordTitle);
}
} else {
$recordTitle = '<em>[' . htmlspecialchars($languageService->sL('LLL:EXT:lang/locallang_core.xlf:labels.no_title')) . ']</em>';
}
......
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment