Hardened against potential XSS injection in table columns

2026-07-27 19:51:38 +00:00 · 2026-06-14 12:08:25 +02:00 · 2026-06-14 12:08:25 +02:00 · 11b41ee66a
commit 11b41ee66a
parent c9dd27712c
2 changed files with 4 additions and 4 deletions
--- a/src/DataTables/Column/IconLinkColumn.php
+++ b/src/DataTables/Column/IconLinkColumn.php
@ -87,9 +87,9 @@ class IconLinkColumn extends AbstractColumn
            return sprintf(
                '<a class="btn btn-primary btn-sm %s" href="%s" title="%s"><i class="%s"></i></a>',
                $disabled ? 'disabled' : '',
-                $href,
-                $title,
-                $icon
+                htmlspecialchars($href),
+                htmlspecialchars($title ?? ''),
+                htmlspecialchars($icon ?? '')
            );
        }