Merge pull request #225 from JeroenBoersma/patch-1

Disable Reflected XSS on de slider confguration
EmicoEcommerce · Jan 14, 2022 · fd5b60b · fd5b60b
2 parents 4764fad + 2fd9caa
commit fd5b60b
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/view/frontend/templates/product/layered/slider.phtml b/view/frontend/templates/product/layered/slider.phtml
@@ -31,7 +31,7 @@ $disabledSliderUrlInputValue = sprintf('%s-%s', $minValue, $maxValue);
             <span class="postfix"><?= $itemPostfix ?></span>
         </span>
     </div>
-    <div class="slider" data-mage-init='<?=$block->getJsSliderConfig()?>'></div>
+    <div class="slider" data-mage-init="<?=$block->escapeHtmlAttr($block->getJsSliderConfig())?>"></div>
     <div class="labels">
         <span class="current-min-value">
             <span class="prefix"><?= $itemPrefix ?></span>