From 309af8f936ea4054af67f2c499cf13879318d333 Mon Sep 17 00:00:00 2001
From: Wouter Wolters <typo3@wouterwolters.nl>
Date: Mon, 17 Feb 2014 22:27:16 +0100
Subject: [PATCH] [BUGFIX] Add missing htmlspecialchars for thumbnail URL

Resolves: #56057
Releases: 6.2, 6.1
Change-Id: I9c1ec60e7518867d27e99681d3d18957a27c4983
Reviewed-on: https://review.typo3.org/27670
Reviewed-by: Helmut Hummel
Tested-by: Helmut Hummel
---
 typo3/sysext/backend/Classes/Clipboard/Clipboard.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/typo3/sysext/backend/Classes/Clipboard/Clipboard.php b/typo3/sysext/backend/Classes/Clipboard/Clipboard.php
index 93ff445c1268..da824274608c 100644
--- a/typo3/sysext/backend/Classes/Clipboard/Clipboard.php
+++ b/typo3/sysext/backend/Classes/Clipboard/Clipboard.php
@@ -369,7 +369,7 @@ class Clipboard {
 								$processedFile = $fileObject->process(\TYPO3\CMS\Core\Resource\ProcessedFile::CONTEXT_IMAGEPREVIEW, array());
 								if ($processedFile) {
 									$thumbUrl = $processedFile->getPublicUrl(TRUE);
-									$thumb .= '<br /><img src="' . $thumbUrl . '" title="' . htmlspecialchars($fileObject->getName()) . '" alt="" />';
+									$thumb .= '<br /><img src="' . htmlspecialchars($thumbUrl) . '" title="' . htmlspecialchars($fileObject->getName()) . '" alt="" />';
 								}
 							}
 							$lines[] = '
-- 
GitLab