Avoid double htmlspecialchars for links using Display::url

AngelFQC · AngelFQC · commit a9d0097466e5 · 2025-01-17T11:32:49.000-05:00
See 15023ce
diff --git a/main/inc/lib/display.lib.php b/main/inc/lib/display.lib.php
@@ -946,7 +946,6 @@ public static function url($name, $url, $attributes = [])
     {
         if (!empty($url)) {
             $url = preg_replace('#&amp;#', '&', $url);
-            $url = htmlspecialchars($url, ENT_QUOTES, 'UTF-8');
             $attributes['href'] = $url;
         }
 

Original file line number	Diff line number	Diff line change
`@@ -946,7 +946,6 @@ public static function url($name, $url, $attributes = [])`
`946`	`946`	`{`
`947`	`947`	`if (!empty($url)) {`
`948`	`948`	`$url = preg_replace('#&#', '&', $url);`
`949`		`- $url = htmlspecialchars($url, ENT_QUOTES, 'UTF-8');`
`950`	`949`	`$attributes['href'] = $url;`
`951`	`950`	`}`
`952`	`951`