xrav3nz
13. September 2019 um 03:58
52
Nice catch! I just submitted a PR to fix this in core (another will follow shortly for assignment).
master ← xrav3nz:fix/do-not-escape-fancy-title
merged 02:04PM - 13 Sep 19 UTC
> CONTEXT: https://meta.discourse.org/t/quick-access-to-bookmarks-and-messages-o… n-user-menu/32787/50
`fancy_title` is already escaped by Rails. Escaping it again would print
the HTML entity as-is, e.g. `"` instead of `"`.
This fixes the issue by introducing a new `escapedContent` attribute on
the `QuickAccessItem` widget.
Special characters are escaped before being rendered, however, fancy_title is already escaped . Escaping it again would print the HTML entity as-is, e.g. " instead of the desired " .
10 „Gefällt mir“