ダッシュボードの受信メールのメールフォーム表示名についてサニタイズ

baserproject · Oct 24, 2024 · 0623a4f · 0623a4f
1 parent 345ad70
commit 0623a4f
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/plugins/bc-admin-third/templates/plugin/BcMail/Admin/element/Dashboard/mail_messages.php b/plugins/bc-admin-third/templates/plugin/BcMail/Admin/element/Dashboard/mail_messages.php
@@ -29,7 +29,7 @@
         <ul class="bca-content-info__list">
           <li class="bca-content-info__list-item">
             <?php foreach($this->Mail->getPublishedMailContents($site->id) as $mailContent): ?>
-              <?php echo $mailContent->content->title ?>：
+              <?php echo h($mailContent->content->title) ?>：
               <?php $this->BcBaser->link(
                 __d('baser_core', '{0} 件', $mailContent->getNumberOfMessages()),
                 ['plugin' => 'BcMail', 'controller' => 'MailMessages', 'action' => 'index', $mailContent->id]