Escape svg label

Signed-off-by: Maximilian Krög <maxi_kroeg@web.de>
MoonE · Nov 3, 2024 · 5acf10f · 5acf10f
1 parent 90f3c58
commit 5acf10f
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/libraries/classes/Gis/GisVisualization.php b/libraries/classes/Gis/GisVisualization.php
@@ -674,7 +674,7 @@ private function prepareDataSet(array $data, array $scale_data, $format, $result
             if ($format === 'svg') {
                 $results .= $gis_obj->prepareRowAsSvg(
                     $row[$this->settings['spatialColumn']],
-                    $label,
+                    htmlspecialchars($label),
                     $this->settings['colors'][$index],
                     $scale_data
                 );