Convert applicable characters to HTML entities

aplus-framework · Jan 5, 2025 · c3c16d4 · c3c16d4
1 parent a58e564
commit c3c16d4
Showing 1 changed file with 4 additions and 4 deletions.
diff --git a/src/Debug/ValidationCollector.php b/src/Debug/ValidationCollector.php
@@ -113,14 +113,14 @@ protected function renderValidations() : string
                     <td rowspan="<?= $count ?>"><?= $index + 1 ?></td>
                     <td rowspan="<?= $count ?>"><?= $item['type'] ?></td>
                     <td rowspan="<?= $count ?>"><?= $count ?></td>
-                    <td><?= $errors[0]['field'] ?? '' ?></td>
-                    <td><?= $errors[0]['error'] ?? '' ?></td>
+                    <td><?= \htmlentities($errors[0]['field'] ?? '') ?></td>
+                    <td><?= \htmlentities($errors[0]['error'] ?? '') ?></td>
                     <td rowspan="<?= $count ?>"><?= Debugger::roundSecondsToMilliseconds($item['end'] - $item['start']) ?></td>
                 </tr>
                 <?php for ($i = 1; $i < $count; $i++): ?>
                     <tr>
-                        <td><?= $errors[$i]['field'] ?></td>
-                        <td><?= $errors[$i]['error'] ?></td>
+                        <td><?= \htmlentities($errors[$i]['field']) ?></td>
+                        <td><?= \htmlentities($errors[$i]['error']) ?></td>
                     </tr>
                 <?php endfor;
             endforeach; ?>