diff options
| author | Maurício Meneghini Fauth <mauricio@fauth.dev> | 2022-01-13 23:39:06 +0300 |
|---|---|---|
| committer | Maurício Meneghini Fauth <mauricio@fauth.dev> | 2022-01-13 23:41:16 +0300 |
| commit | 9b3a1f7734c6f4a9787329db23beee23636f213c (patch) | |
| tree | 6d44e33490d12f3368c1165d689e9c26980b32ce /templates/config/form_display/display.twig | |
| parent | 0bee94b27ee7681bb464efd81f4517150a99b330 (diff) | |
| parent | 813ffbf56226c93ef73dd938c3cc881d94f7f5a7 (diff) | |
Merge branch 'QA_5_1-security' into master-security
Signed-off-by: Maurício Meneghini Fauth <mauricio@fauth.dev>
Diffstat (limited to 'templates/config/form_display/display.twig')
| -rw-r--r-- | templates/config/form_display/display.twig | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/templates/config/form_display/display.twig b/templates/config/form_display/display.twig index c60b4757ee..d68259584d 100644 --- a/templates/config/form_display/display.twig +++ b/templates/config/form_display/display.twig @@ -1,4 +1,4 @@ -<form method="post" action="{{ action|raw }}" class="config-form disableAjax"> +<form method="post" action="{{ action|e('html_attr') }}" class="config-form disableAjax"> <input type="hidden" name="tab_hash" value=""> {% if has_check_page_refresh %} <input type="hidden" name="check_page_refresh" id="check_page_refresh" value=""> |