Added escape for block argument

Gabriel Galvao da Gama · Gabriel Galvao da Gama · commit b4b16fff64ee · 2020-07-02T16:45:41.000+01:00
diff --git a/app/code/Magento/Cms/view/adminhtml/templates/url_filter_applier.phtml b/app/code/Magento/Cms/view/adminhtml/templates/url_filter_applier.phtml
@@ -5,12 +5,13 @@
  */
 
 /** @var $block \Magento\Backend\Block\Template */
+/** @var \Magento\Framework\Escaper $escaper */
 ?>
 <script type="text/x-magento-init">
     {
         "*": {
             "Magento_Ui/js/grid/url-filter-applier": {
-                "listingNamespace": "<?= $block->getListingNamespace() ?>"
+                "listingNamespace": "<?= $escaper->escapeJs($block->getListingNamespace()) ?>"
             }
         }
     }

Original file line number	Diff line number	Diff line change
`@@ -5,12 +5,13 @@`
`5`	`5`	`*/`
`6`	`6`
`7`	`7`	`/** @var $block \Magento\Backend\Block\Template */`
	`8`	`+/** @var \Magento\Framework\Escaper $escaper */`
`8`	`9`	`?>`
`9`	`10`	`<script type="text/x-magento-init">`
`10`	`11`	`{`
`11`	`12`	`"*": {`
`12`	`13`	`"Magento_Ui/js/grid/url-filter-applier": {`
`13`		`- "listingNamespace": "<?= $block->getListingNamespace() ?>"`
	`14`	`+ "listingNamespace": "<?= $escaper->escapeJs($block->getListingNamespace()) ?>"`
`14`	`15`	`}`
`15`	`16`	`}`
`16`	`17`	`}`