Encode the title of moderation queues

WoltLab · Jan 1, 2024 · bec9afc · bec9afc
1 parent 38a9727
commit bec9afc
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/wcfsetup/install/files/lib/data/moderation/queue/ModerationQueueAction.class.php b/wcfsetup/install/files/lib/data/moderation/queue/ModerationQueueAction.class.php
@@ -14,6 +14,7 @@
 use wcf\system\user\storage\UserStorageHandler;
 use wcf\system\visitTracker\VisitTracker;
 use wcf\system\WCF;
+use wcf\util\StringUtil;
 
 /**
  * Executes moderation queue-related actions.
@@ -145,7 +146,7 @@ public function getModerationQueueData(): array
 
         $items = \array_map(static function (ViewableModerationQueue $queue) {
             return [
-                'content' => $queue->getAffectedObject()->getTitle(),
+                'content' => StringUtil::encodeHTML($queue->getAffectedObject()->getTitle()),
                 'image' => '<span class="icon icon48 ' . $queue->getIconName() . '"></span>',
                 'isUnread' => $queue->isNew(),
                 'link' => $queue->getLink(),