Skip to content

Commit 8935451

Browse files
committed
Add escaping
1 parent 1fda3b5 commit 8935451

1 file changed

Lines changed: 2 additions & 1 deletion

File tree

view/frontend/templates/script/component/category/add-to-wishlist.phtml

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -19,7 +19,8 @@ use Magento\Framework\View\Element\Template;
1919

2020
const customerSection = Alpine.store('LokiLocalStorage').get('customer');
2121
if (!customerSection.fullname) {
22-
Alpine.store('LokiMessageStore').addNoticeMessage('<?= __('You need to login to use the wishlist') ?>');
22+
const message = '<?= $escaper->escapeHtml(__('You need to login to use the wishlist')) ?>';
23+
Alpine.store('LokiMessageStore').addNoticeMessage(message);
2324
return;
2425
}
2526

0 commit comments

Comments
 (0)