Added encoding to the HTML attributes.

Martin Brecht-Precht · Martin Brecht-Precht · commit 04e49b76aaa4 · 2019-06-12T21:47:55.000+02:00
diff --git a/src/Handler/HtmlTagBuilder/HtmlTagBuilder.php b/src/Handler/HtmlTagBuilder/HtmlTagBuilder.php
@@ -127,6 +127,7 @@ protected function getAttributeString(array $attributes): string
 			if (empty($value)) {
 				continue;
 			}
+			$value = htmlspecialchars($value, ENT_COMPAT | ENT_SUBSTITUTE);
 			$attributeParts[] = mb_strtolower($key) . '="' . $value . '"';
 		}
 		unset($value);

Original file line number	Diff line number	Diff line change
`@@ -127,6 +127,7 @@ protected function getAttributeString(array $attributes): string`
`127`	`127`	`if (empty($value)) {`
`128`	`128`	`continue;`
`129`	`129`	`}`
	`130`	`+ $value = htmlspecialchars($value, ENT_COMPAT \| ENT_SUBSTITUTE);`
`130`	`131`	`$attributeParts[] = mb_strtolower($key) . '="' . $value . '"';`
`131`	`132`	`}`
`132`	`133`	`unset($value);`