IBX-7442: Added escape filter html attribute on item_label

ezsystems · Feb 13, 2024 · cb432c5 · cb432c5
1 parent 11849cf
commit cb432c5
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/bundle/Resources/views/themes/admin/ui/component/dropdown/dropdown_item.html.twig b/src/bundle/Resources/views/themes/admin/ui/component/dropdown/dropdown_item.html.twig
@@ -14,7 +14,7 @@
     {% set is_selected = custom_form ? choice.value == value : choice is selectedchoice(value) %}
     <li
         data-value="{{ choice.value }}"
-        data-filter-value="{{ item_label }}"
+        data-filter-value="{{ item_label|e('html_attr') }}"
         {% if choice.icon is defined %}
             data-choice-icon="{{ choice.icon }}"
         {% endif %}