Project

General

Profile

Actions

Bug #80288

closed

newContentWizard: Label is escaped twice

Added by Robert Vock over 7 years ago. Updated about 6 years ago.

Status:
Closed
Priority:
Should have
Assignee:
-
Category:
Backend User Interface
Target version:
-
Start date:
2017-03-15
Due date:
% Done:

100%

Estimated time:
TYPO3 Version:
8
PHP Version:
Tags:
Complexity:
Is Regression:
No
Sprint Focus:

Description

The label for the newContentWizard is escaped twice. Once in the controller:
https://github.com/TYPO3/TYPO3.CMS/blob/TYPO3_8-6-1/typo3/sysext/backend/Classes/Controller/ContentElement/NewContentElementController.php#L262

And once in the template:
https://github.com/TYPO3/TYPO3.CMS/blob/TYPO3_8-6-1/typo3/sysext/backend/Resources/Private/Templates/DocumentTemplate/Tabs.html#L10

The following PageTS leads to a double-escaped ampersand:

mod.wizards.newContentElement.wizardItems.customer.header = Customer & Partner
mod.wizards.newContentElement.wizardItems.customer.show = *
mod.wizards.newContentElement.wizardItems.customer.elements.example < mod.wizards.newContentElement.wizardItems.common.elements.textmedia


Files

Double-Escaping.png (7.66 KB) Double-Escaping.png Robert Vock, 2017-03-15 14:58
Actions

Also available in: Atom PDF