File tree Expand file tree Collapse file tree 1 file changed +3
-3
lines changed Expand file tree Collapse file tree 1 file changed +3
-3
lines changed Original file line number Diff line number Diff line change 5
5
*/
6
6
?>
7
7
<?php /* @var $block \Magento\Sales\Block\Adminhtml\Order\Create\Sidebar\AbstractSidebar */ ?>
8
- <div class="create-order-sidebar-block" id="sidebar_data_<?= ( int ) $ block ->getDataId () ?> ">
8
+ <div class="create-order-sidebar-block" id="sidebar_data_<?= $ block -> escapeHtmlAttr ( $ block ->getDataId () ) ?> ">
9
9
<div class="head sidebar-title-block">
10
10
<a href="#" class="action-refresh"
11
11
title="<?= $ block ->escapeHtml (__ ('Refresh ' )) ?> "
12
- onclick="order.loadArea('sidebar_<?= ( int ) $ block ->getDataId () ?> ', 'sidebar_data_<?= ( int ) $ block ->getDataId () ?> ');return false;">
12
+ onclick="order.loadArea('sidebar_<?= $ block -> escapeJs ( $ block ->getDataId ()) ?> ', 'sidebar_data_<?= $ block -> escapeJs ( $ block ->getDataId () ) ?> ');return false;">
13
13
<span><?= $ block ->escapeHtml (__ ('Refresh ' )) ?> </span>
14
14
</a>
15
15
<h5 class="create-order-sidebar-label">
75
75
type="checkbox"
76
76
class="admin__control-checkbox"
77
77
name="sidebar[remove][<?= (int ) $ block ->getItemId ($ _item ) ?> ]"
78
- value="<?= ( int ) $ block ->getDataId () ?> "
78
+ value="<?= $ block -> escapeHtmlAttr ( $ block ->getDataId () ) ?> "
79
79
title="<?= $ block ->escapeHtml (__ ('Remove ' )) ?> " />
80
80
<label class="admin__field-label"
81
81
for="sidebar-remove-<?= $ block ->escapeHtmlAttr ($ block ->getSidebarStorageAction ()) ?> -<?= (int ) $ block ->getItemId ($ _item ) ?> ">
You can’t perform that action at this time.
0 commit comments