Skip to content

Commit 7200593

Browse files
committed
Use Magento\Framework\Escaper not htmlspecialchars
1 parent 1a1cba6 commit 7200593

File tree

1 file changed

+10
-1
lines changed

1 file changed

+10
-1
lines changed

app/code/Magento/Indexer/Block/Backend/Grid/Column/Renderer/ScheduleStatus.php

Lines changed: 10 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -6,11 +6,17 @@
66
namespace Magento\Indexer\Block\Backend\Grid\Column\Renderer;
77

88
use Magento\Backend\Block\Widget\Grid\Column\Renderer\AbstractRenderer;
9+
use Magento\Framework\Escaper;
910
use Magento\Framework\Mview\View;
1011
use Magento\Framework\Phrase;
1112

1213
class ScheduleStatus extends AbstractRenderer
1314
{
15+
/**
16+
* @var \Magento\Framework\Escaper
17+
*/
18+
protected $escaper;
19+
1420
/**
1521
* @var \Magento\Framework\Mview\ViewInterface
1622
*/
@@ -19,14 +25,17 @@ class ScheduleStatus extends AbstractRenderer
1925
/**
2026
* @param \Magento\Backend\Block\Context $context
2127
* @param \Magento\Framework\Mview\ViewInterface $viewModel
28+
* @param \Magento\Framework\Escaper $escaper
2229
* @param array $data
2330
*/
2431
public function __construct(
2532
\Magento\Backend\Block\Context $context,
33+
Escaper $escaper,
2634
View $viewModel,
2735
array $data = []
2836
) {
2937
parent::__construct($context, $data);
38+
$this->escaper = $escaper;
3039
$this->viewModel = $viewModel;
3140
}
3241

@@ -80,7 +89,7 @@ public function render(\Magento\Framework\DataObject $row)
8089
return '<span class="' . $class . '"><span>' . $text . '</span></span>';
8190
} catch (\Exception $exception) {
8291
return '<span class="grid-severity-minor"><span>' .
83-
htmlspecialchars(
92+
$this->escaper->escapeHtml(
8493
get_class($exception) . ': ' . $exception->getMessage()
8594
) . '</span></span>';
8695
}

0 commit comments

Comments
 (0)