Form editor fixes

[MAILPOET-1892]
2019-03-26 16:43:00 +01:00
parent 8edf58b2b2
commit 0a84516289
3 changed files with 7 additions and 4 deletions
--- a/lib/Form/Block/Base.php
+++ b/lib/Form/Block/Base.php
@@ -76,7 +76,7 @@ abstract class Base {
    if (isset($block['params']['label'])
      && strlen(trim($block['params']['label'])) > 0) {
      $html .= '<label class="mailpoet_'.$block['type'].'_label">';
-      $html .= $block['params']['label'];
+      $html .= htmlspecialchars($block['params']['label']);

      if (isset($block['params']['required']) && $block['params']['required']) {
        $html .= ' <span class="mailpoet_required">*</span>';