helpers/url: Properly escape image urls

2018-10-09 08:30:20 +02:00 · 2018-10-09 08:30:20 +02:00 · 4e6b936862
parent 7ba0466048
commit 4e6b936862
1 changed files with 1 additions and 1 deletions
--- a/library/Icinga/Web/View/helpers/url.php
+++ b/library/Icinga/Web/View/helpers/url.php
@ -77,7 +77,7 @@ $this->addHelperFunction('img', function ($url, $params = null, array $propertie

    return sprintf(
        '<img src="%s"%s />',
-        $view->url($url, $params),
+        $view->escape($view->url($url, $params)),
        $view->propertiesToString($properties)
    );
 });