Skip to content

Commit 5c8f128

Browse files
committed
MAGETWO-90974: HTML showing in minicart with custom option file upload
Add <a> </a> as allowed tags for the escape html function.
1 parent f2d12af commit 5c8f128

File tree

2 files changed

+3
-3
lines changed
  • app/code/Magento

2 files changed

+3
-3
lines changed

app/code/Magento/Checkout/view/frontend/web/template/summary/item/details.html

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -35,7 +35,7 @@
3535
<dd class="values" data-bind="html: full_view"></dd>
3636
<!-- /ko -->
3737
<!-- ko ifnot: ($data.full_view)-->
38-
<dd class="values" data-bind="text: value"></dd>
38+
<dd class="values" data-bind="html: value"></dd>
3939
<!-- /ko -->
4040
<!-- /ko -->
4141
</dl>

app/code/Magento/Sales/view/frontend/templates/order/items/renderer/default.phtml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -20,9 +20,9 @@ $_item = $block->getItem();
2020
<?php $_formatedOptionValue = $block->getFormatedOptionValue($_option) ?>
2121
<dd>
2222
<?php if (isset($_formatedOptionValue['full_view'])): ?>
23-
<?= $block->escapeHtml($_formatedOptionValue['full_view']) ?>
23+
<?= $block->escapeHtml($_formatedOptionValue['full_view'], ['a']) ?>
2424
<?php else: ?>
25-
<?=$block->escapeHtml($_formatedOptionValue['value']) ?>
25+
<?=$block->escapeHtml($_formatedOptionValue['value'], ['a']) ?>
2626
<?php endif; ?>
2727
</dd>
2828
<?php else: ?>

0 commit comments

Comments
 (0)