Contrib.social

Term title is encoded twice

Open on Drupal.org →
Created on 27 June 2025, 10 days ago

Problem/Motivation

Term title doesn't require Html::escape() if it's displayed as a link (Link does it's own encoding to prevent any XSS)

Steps to reproduce

Create a new term with an apostrophe like "What's on" or with ampersand "Weekends & Vacations"
New terms are displayed with encoded & and '

Proposed resolution

remove Html::escape() from https://git.drupalcode.org/project/taxonomy_manager/-/blame/2.0.x/src/Fo...

Remaining tasks

update code

User interface changes

none

API changes

none

Data model changes

none

🐛 Bug report
Status

Active

Version

2.0

Component

Code

Created by

🇦🇺Australia jannakha Brisbane!

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Merge Requests

Comments & Activities

contrib.social Blog FAQ Discussions
Production build 0.71.5 2024