Skip to content

Commit 8864695

Browse files
Add escaping to increment ID
Co-authored-by: Ihor Sviziev <ihor-sviziev@users.noreply.github.com>
1 parent 66e63e0 commit 8864695

File tree

1 file changed

+1
-1
lines changed
  • app/code/Magento/Sales/view/frontend/templates/order/print

1 file changed

+1
-1
lines changed

app/code/Magento/Sales/view/frontend/templates/order/print/invoice.phtml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,7 @@
1414
<?php foreach ($_invoices as $_invoice) : ?>
1515
<div class="order-details-items invoice">
1616
<div class="order-title">
17-
<strong><?= $block->escapeHtml(__('Invoice #')) ?><?= $_invoice->getIncrementId() ?></strong>
17+
<strong><?= $block->escapeHtml(__('Invoice #')) ?><?= $block->escapeHtml($_invoice->getIncrementId()) ?></strong>
1818
</div>
1919
<div class="table-wrapper table-order-items invoice">
2020
<table class="data table table-order-items invoice" id="my-invoice-table-<?= (int) $_invoice->getId() ?>">

0 commit comments

Comments
 (0)