Merge pull request #22 from punktDeForks/midalmis-patch-1

BUGFIX: Escape content of multiLineText element
neos · Mar 30, 2020 · fdc9f90 · fdc9f90
2 parents 14691c1 + 1a10ec6
commit fdc9f90
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/Resources/Private/Fusion/Elements/MultiLineText.fusion b/Resources/Private/Fusion/Elements/MultiLineText.fusion
@@ -5,7 +5,7 @@ prototype(Neos.Form:MultiLineText) < prototype(Neos.Form.FusionRenderer:FormElem
             attributes {
                 name = ${elementName}
             }
-            content = ${elementValue}
+            content = ${String.htmlSpecialChars(elementValue)}
         }
     }
-}
+}