LTI: Added HTML escaping in confirmation screen

Added htmlspecialchars in ilLTIConsumerAdministrationGUI::confirmDeleteProviders
surlabs · Dec 9, 2024 · ba43e2c · ba43e2c
1 parent 08d7ad7
commit ba43e2c
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/Modules/LTIConsumer/classes/class.ilLTIConsumerAdministrationGUI.php b/Modules/LTIConsumer/classes/class.ilLTIConsumerAdministrationGUI.php
@@ -785,7 +785,7 @@ protected function confirmDeleteProviders(array $providers, string $cancelComman
             $confirmationGUI->addItem(
                 'provider_ids[]',
                 (string) $provider->getId(),
-                $provider->getTitle(),
+                htmlspecialchars($provider->getTitle()),
                 $providerIcon
             );
         }