From 309af8f936ea4054af67f2c499cf13879318d333 Mon Sep 17 00:00:00 2001 From: Wouter Wolters <typo3@wouterwolters.nl> Date: Mon, 17 Feb 2014 22:27:16 +0100 Subject: [PATCH] [BUGFIX] Add missing htmlspecialchars for thumbnail URL Resolves: #56057 Releases: 6.2, 6.1 Change-Id: I9c1ec60e7518867d27e99681d3d18957a27c4983 Reviewed-on: https://review.typo3.org/27670 Reviewed-by: Helmut Hummel Tested-by: Helmut Hummel --- typo3/sysext/backend/Classes/Clipboard/Clipboard.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/typo3/sysext/backend/Classes/Clipboard/Clipboard.php b/typo3/sysext/backend/Classes/Clipboard/Clipboard.php index 93ff445c1268..da824274608c 100644 --- a/typo3/sysext/backend/Classes/Clipboard/Clipboard.php +++ b/typo3/sysext/backend/Classes/Clipboard/Clipboard.php @@ -369,7 +369,7 @@ class Clipboard { $processedFile = $fileObject->process(\TYPO3\CMS\Core\Resource\ProcessedFile::CONTEXT_IMAGEPREVIEW, array()); if ($processedFile) { $thumbUrl = $processedFile->getPublicUrl(TRUE); - $thumb .= '<br /><img src="' . $thumbUrl . '" title="' . htmlspecialchars($fileObject->getName()) . '" alt="" />'; + $thumb .= '<br /><img src="' . htmlspecialchars($thumbUrl) . '" title="' . htmlspecialchars($fileObject->getName()) . '" alt="" />'; } } $lines[] = ' -- GitLab