Commit e8ab4641 authored by Nigel McNie's avatar Nigel McNie
Browse files

[1.1_STABLE] HTML escape icon paths so the ampersands are converted properly.

(cherry picked from commit 617a44964a09d4e6f946d3cb1058e6145b8b9c80)
parent 46931a77
......@@ -76,7 +76,7 @@ class PluginBlocktypeFiledownload extends PluginBlocktype {
$result .= '<div title="' . hsc($artefact->get('title')) . '">';
$result .= '<div class="fl"><a href="' . hsc($downloadurl) . '">';
$result .= '<img src="' . call_static_method(generate_artefact_class_name($artefact->get('artefacttype')), 'get_icon', $icondata)
$result .= '<img src="' . hsc(call_static_method(generate_artefact_class_name($artefact->get('artefacttype')), 'get_icon', $icondata))
. '" alt=""></a></div>';
$result .= '<div style="margin-left: 30px;">';
......
Supports Markdown
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment