Escape linked field value in generated JavaScript

If the field values contains a double-quote, the generated JavaScript will trigger a syntax error. Fixes #6
mantisbt-plugins · Apr 30, 2022 · 5c944f3 · 5c944f3
1 parent 5c22f5c
commit 5c944f3
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/pages/bug_page_custom_field_links.php b/pages/bug_page_custom_field_links.php
@@ -74,7 +74,8 @@
 		echo 'linkedFieldValues["'.$t_custom_field_id."\"] = {};\n";
 
 		foreach( $t_linked_values as $t_source_value => $t_target_values ) {
-			echo 'linkedFieldValues["'.$t_custom_field_id.'"]["'. $t_source_value.'"] = ' . JavascriptUtils::toJSArray( $t_target_values ).";\n";
+			echo 'linkedFieldValues["' . $t_custom_field_id . '"]["' . addslashes( $t_source_value ) . '"] = '
+				. JavascriptUtils::toJSArray( $t_target_values ).";\n";
 		}
 	}
 }