Stop calling Html::escape() for checkbox options

Created on 7 April 2023, almost 2 years ago
Updated 30 May 2023, over 1 year ago

Problem/Motivation

Coming from #3348093-17: Deprecate user_roles() and user_role_names() β†’
There few places in core which using to escape options for no reason (all other places don't)

Proposed resolution

Remove escaping as twig cares to escape on render and other places not using using it

Probably it could be backported to 9.5

Remaining tasks

path/review/commit

User interface changes

no

API changes

no

Data model changes

no

Release notes snippet

πŸ“Œ Task
Status

Needs work

Version

11.0 πŸ”₯

Component
OtherΒ  β†’

Last updated about 8 hours ago

Created by

πŸ‡«πŸ‡·France andypost

Live updates comments and jobs are added and updated live.
  • Security improvements

    It makes Drupal less vulnerable to abuse or misuse. Note, this is the preferred tag, though the Security tag has a large body of issues tagged to it. Do NOT publicly disclose security vulnerabilities; contact the security team instead. Anyone (whether security team or not) can apply this tag to security improvements that do not directly present a vulnerability e.g. hardening an API to add filtering to reduce a common mistake in contributed modules.

Sign in to follow issues

Comments & Activities

Not all content is available!

It's likely this issue predates Contrib.social: some issue and comment data are missing.

Production build 0.71.5 2024