Skip to content

Commit e5bcfcd

Browse files
Escape html removed from error message
1 parent 91584fc commit e5bcfcd

File tree

3 files changed

+5
-18
lines changed
  • app/code/Magento/Customer
  • dev/tests/integration/testsuite/Magento/Customer/Controller/Adminhtml

3 files changed

+5
-18
lines changed

app/code/Magento/Customer/Controller/Adminhtml/Group/Save.php

Lines changed: 2 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -20,11 +20,6 @@ class Save extends \Magento\Customer\Controller\Adminhtml\Group implements HttpP
2020
*/
2121
protected $dataObjectProcessor;
2222

23-
/**
24-
* @var \Magento\Framework\Escaper
25-
*/
26-
protected $escaper;
27-
2823
/**
2924
*
3025
* @param \Magento\Backend\App\Action\Context $context
@@ -34,7 +29,6 @@ class Save extends \Magento\Customer\Controller\Adminhtml\Group implements HttpP
3429
* @param \Magento\Backend\Model\View\Result\ForwardFactory $resultForwardFactory
3530
* @param \Magento\Framework\View\Result\PageFactory $resultPageFactory
3631
* @param \Magento\Framework\Reflection\DataObjectProcessor $dataObjectProcessor
37-
* @param \Magento\Framework\Escaper $escaper
3832
*/
3933
public function __construct(
4034
\Magento\Backend\App\Action\Context $context,
@@ -43,11 +37,9 @@ public function __construct(
4337
GroupInterfaceFactory $groupDataFactory,
4438
\Magento\Backend\Model\View\Result\ForwardFactory $resultForwardFactory,
4539
\Magento\Framework\View\Result\PageFactory $resultPageFactory,
46-
\Magento\Framework\Reflection\DataObjectProcessor $dataObjectProcessor,
47-
\Magento\Framework\Escaper $escaper
40+
\Magento\Framework\Reflection\DataObjectProcessor $dataObjectProcessor
4841
) {
4942
$this->dataObjectProcessor = $dataObjectProcessor;
50-
$this->escaper = $escaper;
5143
parent::__construct(
5244
$context,
5345
$coreRegistry,
@@ -104,7 +96,7 @@ public function execute()
10496
$this->messageManager->addSuccessMessage(__('You saved the customer group.'));
10597
$resultRedirect->setPath('customer/group');
10698
} catch (\Exception $e) {
107-
$this->messageManager->addErrorMessage($this->escaper->escapeHtml($e->getMessage()));
99+
$this->messageManager->addErrorMessage($e->getMessage());
108100
if ($customerGroup != null) {
109101
$this->storeCustomerGroupDataToSession(
110102
$this->dataObjectProcessor->buildOutputDataArray(

app/code/Magento/Customer/Test/Unit/Controller/Adminhtml/Group/SaveTest.php

Lines changed: 1 addition & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -87,10 +87,6 @@ protected function setUp()
8787
$this->dataObjectProcessorMock = $this->getMockBuilder(DataObjectProcessor::class)
8888
->disableOriginalConstructor()
8989
->getMock();
90-
$this->escaper = $this->getMockBuilder(\Magento\Framework\Escaper::class)
91-
->disableOriginalConstructor()
92-
->setMethods(['escapeHtml'])
93-
->getMock();
9490
$this->request = $this->getMockBuilder(\Magento\Framework\App\RequestInterface::class)
9591
->getMockForAbstractClass();
9692
$this->resultRedirectFactory = $this->getMockBuilder(RedirectFactory::class)
@@ -133,8 +129,7 @@ protected function setUp()
133129
$this->groupInterfaceFactoryMock,
134130
$this->forwardFactoryMock,
135131
$this->pageFactoryMock,
136-
$this->dataObjectProcessorMock,
137-
$this->escaper
132+
$this->dataObjectProcessorMock
138133
);
139134
}
140135

dev/tests/integration/testsuite/Magento/Customer/Controller/Adminhtml/GroupTest.php

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -199,7 +199,7 @@ public function testSaveActionCreateNewGroupWithoutCode()
199199
$this->dispatch('backend/customer/group/save');
200200

201201
$this->assertSessionMessages(
202-
$this->equalTo(['"code" is required. Enter and try again.']),
202+
$this->equalTo([htmlspecialchars('"code" is required. Enter and try again.')]),
203203
MessageInterface::TYPE_ERROR
204204
);
205205
}
@@ -292,7 +292,7 @@ public function testSaveActionNewGroupWithoutGroupCode()
292292
$this->dispatch('backend/customer/group/save');
293293

294294
$this->assertSessionMessages(
295-
$this->equalTo(['"code" is required. Enter and try again.']),
295+
$this->equalTo([htmlspecialchars('"code" is required. Enter and try again.')]),
296296
MessageInterface::TYPE_ERROR
297297
);
298298
$this->assertSessionMessages($this->isEmpty(), MessageInterface::TYPE_SUCCESS);

0 commit comments

Comments
 (0)