[TikiWiki-commits] [Git][tikiwiki/tiki][master] [FIX] wikiplugin_pdf: Ensure single quotes in parameters are encoded as HTML

Sammy Ndabo pushed to branch master at Tiki Wiki CMS Groupware / Tiki


Commits:
c89b7935 by Sammy Ndabo at 2025-08-13T11:33:12+00:00
[FIX] wikiplugin_pdf: Ensure single quotes in parameters are encoded as HTML
---
* [FIX] wikiplugin_pdf: Ensure single quotes in parameters are encoded as HTML

* [FIX] wikiplugin_tracker: Allow not having a preview button

See merge request tikiwiki/tiki!8282

- - - - -


1 changed file:

- lib/wiki-plugins/wikiplugin_pdf.php


Changes:

=====================================
lib/wiki-plugins/wikiplugin_pdf.php
=====================================
@@ -309,6 +309,10 @@ function wikiplugin_pdf($data, $params)
     $paramList = '';
     //creating string of data paramaters set by user
     foreach ($params as $paramName => $param) {
+        if (str_contains($param, '\'')) {
+            // encode single quotes as html
+            $param = str_replace('\'', ''', $param);
+        }
         $paramList .= $paramName . "='" . $param . "' ";
     }
     return "<pdfsettings " . $paramList . "></pdfsettings>";



View it on GitLab: https://gitlab.com/tikiwiki/tiki/-/commit/c89b79353479afdef8184f80847b77ea77b83fac

-- 
View it on GitLab: https://gitlab.com/tikiwiki/tiki/-/commit/c89b79353479afdef8184f80847b77ea77b83fac
You're receiving this email because of your account on gitlab.com.

_______________________________________________
TikiWiki-cvs mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/tikiwiki-cvs