BUGFIX: Escape displayed password with htmlSpecialChars and support f…

…or Neos 8
code-q-web-factory · Feb 6, 2023 · 4bfe882 · 4bfe882
2 parents 9bfca96 + f7d934f
commit 4bfe882
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/Resources/Private/Fusion/Helper/ProtectContent.fusion b/Resources/Private/Fusion/Helper/ProtectContent.fusion
@@ -22,7 +22,7 @@ prototype(CodeQ.PasswordProtectedContent:Helper.ProtectContent) < prototype(Neos
 			condition = ${renderContentInBackend && node.context.inBackend}
 			renderer = afx`
 				<Carbon.Notification:Tag type="info">
-					{Translation.translate('backend.configuredPasswordNotification', null, [configuredPassword], 'Fusion/Helper/ProtectContent', 'CodeQ.PasswordProtectedContent')}
+					{Translation.translate('backend.configuredPasswordNotification', null, [String.htmlSpecialChars(configuredPassword)], 'Fusion/Helper/ProtectContent', 'CodeQ.PasswordProtectedContent')}
 				</Carbon.Notification:Tag>
 				{content}
 			`

diff --git a/composer.json b/composer.json
@@ -5,7 +5,7 @@
     "license": "MIT",
     "keywords": ["flow", "neos", "fusion", "password"],
     "require": {
-        "neos/neos": "~3.2 || ~4.0 || ~5.0 || ~7.0 || dev-master",
+        "neos/neos": "~3.2 || ~4.0 || ~5.0 || ~7.0  || ~8.0 || dev-master",
         "carbon/notification": "^1.0 || ^2.0 || dev-master"
     },
     "autoload": {