add h() call around pluginName

cakephp · Oct 23, 2023 · a7c81b7 · a7c81b7
1 parent 611f0d2
commit a7c81b7
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/templates/element/plugins_panel.php b/templates/element/plugins_panel.php
@@ -16,6 +16,7 @@
  * @var bool $hasEmptyAppConfig
  * @var array $plugins
  */
+use function Cake\Core\h;
 ?>
 <div class="c-plugins-panel">
     <?php
@@ -37,7 +38,7 @@
             <tbody>
             <?php foreach ($plugins as $pluginName => $pluginConfig) : ?>
                 <tr>
-                    <td><?= $pluginName ?></td>
+                    <td><?= h($pluginName) ?></td>
                     <td><?= $pluginConfig['isLoaded'] ? $this->Html->image('DebugKit./img/cake-red.svg') : '' ?></td>
                     <td><?= $pluginConfig['onlyDebug'] ? $this->Html->image('DebugKit./img/cake-red.svg') : '' ?></td>
                     <td><?= $pluginConfig['onlyCli'] ? $this->Html->image('DebugKit./img/cake-red.svg') : '' ?></td>