MDL-69046 core_contentbank: Escape quotes when showing name

rboyatt · Nov 3, 2020 · 66be082 · 66be082
1 parent b8e1eec
commit 66be082
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 7 deletions.
diff --git a/contentbank/templates/bankcontent.mustache b/contentbank/templates/bankcontent.mustache
@@ -146,17 +146,17 @@ data-region="contentbank">
                     </div>
                 {{#contents}}
                     <div class="cb-listitem"
-                        data-file="{{{ title }}}"
-                        data-name="{{{ name }}}"
+                        data-file="{{ title }}"
+                        data-name="{{ name }}"
                         data-bytes="{{ bytes }}"
                         data-timemodified="{{ timemodified }}"
-                        data-type="{{{ type }}}"
-                        data-author="{{{ author }}}">
+                        data-type="{{ type }}"
+                        data-author="{{ author }}">
                         <div class="cb-file cb-column position-relative">
-                            <div class="cb-thumbnail" role="img" aria-label="{{{ name }}}"
+                            <div class="cb-thumbnail" role="img" aria-label="{{ name }}"
                             style="background-image: url('{{{ icon }}}');">
                             </div>
-                            <a href="{{{ link }}}" class="cb-link stretched-link" title="{{{ name }}}">
+                            <a href="{{{ link }}}" class="cb-link stretched-link" title="{{ name }}">
                                 <span class="cb-name word-break-all clamp-2" data-region="cb-content-name">
                                     {{{ name }}}
                                 </span>

diff --git a/contentbank/templates/renamecontent.mustache b/contentbank/templates/renamecontent.mustache
@@ -26,5 +26,5 @@
 }}
     <div class="form-check w-100 justify-content-start">
         <label for="newname">{{#str}}contentname, core_contentbank{{/str}}</label>
-        <input type="text" size="5" id="newname" name="newname"  value="{{{ name }}}" class="form-control text-ltr">
+        <input type="text" size="5" id="newname" name="newname"  value="{{ name }}" class="form-control text-ltr">
     </div>