From 74667491787436cdfec5d7919960a9d349dcd7bf Mon Sep 17 00:00:00 2001 From: Kijin Sung Date: Mon, 26 Jun 2023 22:28:32 +0900 Subject: [PATCH] Fix double escape of multilingual module title --- modules/module/module.controller.php | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/modules/module/module.controller.php b/modules/module/module.controller.php index cab5096cc..683d65cf8 100644 --- a/modules/module/module.controller.php +++ b/modules/module/module.controller.php @@ -393,7 +393,7 @@ class ModuleController extends Module { $args->module_srl = getNextSequence(); } - $args->browser_title = escape(strip_tags($args->browser_title ?? ''), false); + $args->browser_title = escape(strip_tags($args->browser_title ?? ''), false, true); $args->description = isset($args->description) ? escape($args->description, false) : null; if(!isset($args->skin) || $args->skin == '/USE_DEFAULT/') { @@ -506,7 +506,7 @@ class ModuleController extends Module } } - $args->browser_title = escape(strip_tags($args->browser_title ?? $module_info->browser_title), false); + $args->browser_title = escape(strip_tags($args->browser_title ?? $module_info->browser_title), false, true); $args->description = isset($args->description) ? escape($args->description, false) : null; // default value