HTML escape tages on devicesRead.

Opmantek · Feb 5, 2024 · 5e624f4 · 5e624f4
1 parent f780c19
commit 5e624f4
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/app/Views/devicesRead.php b/app/Views/devicesRead.php
@@ -928,7 +928,7 @@
                                                 }
                                             }
                                             $othertags = json_encode($othertags);
-                                            echo '<button type="button" class="btn btn-primary rounded-pill" style="margin-right:20px;"><strong><a style="color:white;" href="' . url_to('devicesCollection') . '?devices.tags=' . $tag . '">' . $tag . '</a>&nbsp;&nbsp;&nbsp;</strong><a href="#" class="delete_tags" style="color:white;" data-tags=\'' . $othertags . '\'><span class="badge text-bg-secondary"><i class="close white-text fas fa-times"></i></span></a></button>';
+                                            echo '<button type="button" class="btn btn-primary rounded-pill" style="margin-right:20px;"><strong><a style="color:white;" href="' . url_to('devicesCollection') . '?devices.tags=' . html_entity_decode($tag, ENT_QUOTES | ENT_HTML5, 'UTF-8') . '">' . html_entity_decode($tag, ENT_QUOTES | ENT_HTML5, 'UTF-8') . '</a>&nbsp;&nbsp;&nbsp;</strong><a href="#" class="delete_tags" style="color:white;" data-tags=\'' . $othertags . '\'><span class="badge text-bg-secondary"><i class="close white-text fas fa-times"></i></span></a>';
                                         }
                                         ?>
                                 </div>