From 33da12cd1e3ef963fd4339d73f6b108d5f942e22 Mon Sep 17 00:00:00 2001 From: Johannes Meyer Date: Fri, 21 Feb 2025 10:15:06 +0100 Subject: [PATCH] Escape resource identifier in monitoring backend form --- .../monitoring/application/forms/Config/BackendConfigForm.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/modules/monitoring/application/forms/Config/BackendConfigForm.php b/modules/monitoring/application/forms/Config/BackendConfigForm.php index 5ed42e1db..05bc95e5b 100644 --- a/modules/monitoring/application/forms/Config/BackendConfigForm.php +++ b/modules/monitoring/application/forms/Config/BackendConfigForm.php @@ -227,7 +227,7 @@ class BackendConfigForm extends ConfigForm 'autosubmit' => true ) ); - $resourceName = isset($formData['resource']) ? $formData['resource'] : $this->getValue('resource'); + $resourceName = $this->getView()->escape($formData['resource'] ?? $this->getValue('resource')); $this->addElement( 'note', 'resource_note',