fix(checkboxedfield): single quote rendering

Signed-off-by: btry <tbugier@teclib.com>
pluginsGLPI · Oct 15, 2018 · 888b13f · 888b13f
1 parent 13ad9dc
commit 888b13f
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/inc/fields/checkboxesfield.class.php b/inc/fields/checkboxesfield.class.php
@@ -50,10 +50,10 @@ public function displayField($canEdit = true) {
                   $current_value = null;
                   $current_value = $this->getValue();
                   echo "<div class='checkbox'>";
-                  echo Html::getCheckbox(['title'         => $value,
+                  echo Html::getCheckbox(['title'         => htmlentities($value, ENT_QUOTES),
                                           'id'            => 'formcreator_field_'.$this->fields['id'].'_'.$i,
                                           'name'          => 'formcreator_field_'.$this->fields['id'] . '[]',
-                                          'value'         => $value,
+                                          'value'         => htmlentities($value, ENT_QUOTES),
                                           'zero_on_empty' => false,
                                           'checked' => (!empty($current_value) && in_array($value, $current_value))]);
                   echo '<label for="formcreator_field_'.$this->fields['id'].'_'.$i.'">';