fix(checkboxesfield): single quote rendering

Signed-off-by: btry <tbugier@teclib.com>
pluginsGLPI · Oct 26, 2018 · fecb8a8 · fecb8a8
1 parent e4bbdb8
commit fecb8a8
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/inc/fields/checkboxesfield.class.php b/inc/fields/checkboxesfield.class.php
@@ -55,10 +55,10 @@ public function displayField($canEdit = true) {
                   $current_value = $this->value;
                   echo "<div class='checkbox'>";
                   echo Html::getCheckbox([
-                     'title'         => $value,
+                     'title'         => htmlentities($value, ENT_QUOTES),
                      'id'            => $domId.'_'.$i,
-                     'name'          => $fieldName . '[]',
-                     'value'         => $value,
+                     'name'          => htmlentities($fieldName, ENT_QUOTES) . '[]',
+                     'value'         => htmlentities($value, ENT_QUOTES),
                      'zero_on_empty' => false,
                      'checked' => in_array($value, $this->value)
                   ]);