Commit fff83ea8 authored by haemmer's avatar haemmer

Ensured that string in data attribute does not violate xml attribute content specifications

parent 3c43b1a9
......@@ -228,7 +228,7 @@ function printOptionElement($IDProviders, $key, $selectedIDP){
// Add logo (which is assumed to be 16x16px) to extension string
$logo = (isset($values['Logo'])) ? 'logo="'.$values['Logo']['URL']. '"' : '' ;
return '<option value="'.$key.'"'.$selected.' data="'.$data.'" '.$logo.'>'.$IdPName.'</option>';
return '<option value="'.$key.'"'.$selected.' data="'.htmlspecialchars($data).'" '.$logo.'>'.$IdPName.'</option>';
Markdown is supported
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment