diff --git a/core/modules/forum/forum.module b/core/modules/forum/forum.module index c82c167..342ed7b 100644 --- a/core/modules/forum/forum.module +++ b/core/modules/forum/forum.module @@ -501,7 +501,12 @@ function template_preprocess_forums(&$variables) { } $row[] = array( - 'data' => $topic->comment_count . $new_replies, + 'data' => [ + [ + '#prefix' => $topic->comment_count, + '#markup' => $new_replies, + ], + ], 'class' => array('forum__replies'), ); $row[] = array( diff --git a/core/modules/forum/src/Tests/ForumTest.php b/core/modules/forum/src/Tests/ForumTest.php index 974e400..c81828e 100644 --- a/core/modules/forum/src/Tests/ForumTest.php +++ b/core/modules/forum/src/Tests/ForumTest.php @@ -514,6 +514,9 @@ function testForumWithNewPost() { // Check that forum renders properly. $this->drupalGet("forum/{$this->forum['tid']}"); $this->assertResponse(200); + + // Verify there is no unintentional HTML tag escaping. + $this->assertNoEscaped('<', ''); } /**