Skip to content

Commit 316818d

Browse files
committed
Escape variable
1 parent 27dcdd5 commit 316818d

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

view/adminhtml/templates/form/field_type/select/option.phtml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -23,7 +23,7 @@ $option = $block->getOption();
2323
) ?>
2424
<?php endforeach; ?>
2525
<?php else: ?>
26-
<option value="<?= $option['value'] ?>">
26+
<option value="<?= $escaper->escapeHtml($option['value']) ?>">
2727
<?= $escaper->escapeHtml(str_repeat('&nbsp;', $option['level'])) ?>
2828
<?= $escaper->escapeHtml($option['label']) ?>
2929
</option>

0 commit comments

Comments
 (0)