Add escaping of template code

jissereitsma · jissereitsma · commit 0f994d43b480 · 2025-09-30T11:34:02.000+02:00
diff --git a/view/frontend/templates/script/component/customer/logout.phtml b/view/frontend/templates/script/component/customer/logout.phtml
@@ -27,7 +27,7 @@ if ($timeout < 1) {
                     'You have signed out and will go to our homepage in %1 seconds.'
                 )
             ) ?>',
-            redirectUrl: '<?= $block->getUrl() ?>',
+            redirectUrl: '<?= $escaper->escapeUrl($block->getUrl()) ?>',
             timeout: <?= (int)$timeout ?>,
             init() {
                 this.prefetch();
@@ -58,6 +58,6 @@ if ($timeout < 1) {
 
 <script type="speculationrules">
     {
-        "prerender": [{ "source": "list", "urls": ["<?= $block->getUrl() ?>"] }]
+        "prerender": [{ "source": "list", "urls": ["<?= $escaper->escapeUrl($block->getUrl()) ?>"] }]
     }
 </script>

Original file line number	Diff line number	Diff line change
`@@ -27,7 +27,7 @@ if ($timeout < 1) {`
`27`	`27`	`'You have signed out and will go to our homepage in %1 seconds.'`
`28`	`28`	`)`
`29`	`29`	`) ?>',`
`30`		`- redirectUrl: '<?= $block->getUrl() ?>',`
	`30`	`+ redirectUrl: '<?= $escaper->escapeUrl($block->getUrl()) ?>',`
`31`	`31`	`timeout: <?= (int)$timeout ?>,`
`32`	`32`	`init() {`
`33`	`33`	`this.prefetch();`
`@@ -58,6 +58,6 @@ if ($timeout < 1) {`
`58`	`58`
`59`	`59`	`<script type="speculationrules">`
`60`	`60`	`{`
`61`		`- "prerender": [{ "source": "list", "urls": ["<?= $block->getUrl() ?>"] }]`
	`61`	`+ "prerender": [{ "source": "list", "urls": ["<?= $escaper->escapeUrl($block->getUrl()) ?>"] }]`
`62`	`62`	`}`
`63`	`63`	`</script>`