Skip to content
Snippets Groups Projects
Commit db02db11 authored by Georg Ringer's avatar Georg Ringer Committed by Tymoteusz Motylewski
Browse files

[BUGFIX] Remove double escaping in template module

The information of a template (title, site title, description) is
already escaped by using fluid. Therefore the htmlspecialchars() must be
removed in the controller.

This is a fix of the regression of the fluidification of #75031.

Resolves: #79424
Releases: master
Change-Id: Iead09ee8f8f0256eee10c2585408d549dbe5c44c
Reviewed-on: https://review.typo3.org/51391


Tested-by: default avatarTYPO3com <no-reply@typo3.com>
Reviewed-by: default avatarWouter Wolters <typo3@wouterwolters.nl>
Tested-by: default avatarWouter Wolters <typo3@wouterwolters.nl>
Reviewed-by: default avatarTymoteusz Motylewski <t.motylewski@gmail.com>
Tested-by: default avatarTymoteusz Motylewski <t.motylewski@gmail.com>
parent 255651db
Branches
Tags
No related merge requests found
......@@ -269,9 +269,9 @@ class TypoScriptTemplateInformationModuleFunctionController extends AbstractFunc
// Processing:
$tableRows = [];
$tableRows[] = $this->tableRowData($lang->getLL('title'), htmlspecialchars($this->templateRow['title']), 'title', $this->templateRow['uid']);
$tableRows[] = $this->tableRowData($lang->getLL('sitetitle'), htmlspecialchars($this->templateRow['sitetitle']), 'sitetitle', $this->templateRow['uid']);
$tableRows[] = $this->tableRowData($lang->getLL('description'), nl2br(htmlspecialchars($this->templateRow['description'])), 'description', $this->templateRow['uid']);
$tableRows[] = $this->tableRowData($lang->getLL('title'), $this->templateRow['title'], 'title', $this->templateRow['uid']);
$tableRows[] = $this->tableRowData($lang->getLL('sitetitle'), $this->templateRow['sitetitle'], 'sitetitle', $this->templateRow['uid']);
$tableRows[] = $this->tableRowData($lang->getLL('description'), $this->templateRow['description'], 'description', $this->templateRow['uid']);
$tableRows[] = $this->tableRowData($lang->getLL('constants'), sprintf($lang->getLL('editToView'), trim($this->templateRow['constants']) ? count(explode(LF, $this->templateRow['constants'])) : 0), 'constants', $this->templateRow['uid']);
$tableRows[] = $this->tableRowData($lang->getLL('setup'), sprintf($lang->getLL('editToView'), trim($this->templateRow['config']) ? count(explode(LF, $this->templateRow['config'])) : 0), 'config', $this->templateRow['uid']);
$assigns['tableRows'] = $tableRows;
......
......@@ -53,7 +53,7 @@
<f:section name="TemplateTableRow">
<tr>
<td><a href="{line.url}" title="{f:translate(key:'LLL:EXT:lang/Resources/Private/Language/locallang_common.xlf:editField')}"><strong>{line.label}</strong></a></td>
<td width="80%">{line.data}</td>
<td width="80%">{line.data -> f:format.nl2br()}</td>
<td><a href="{line.url}" title="{f:translate(key:'LLL:EXT:lang/Resources/Private/Language/locallang_common.xlf:editField')}"><span class="btn btn-default"><core:icon identifier="actions-open" /></span></a></td>
</tr>
</f:section>
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment