If text to be included in the input fields contains quotes, the form breaks. The attached patch passes the text through check_plain() before it is put into the value attribute of the input field.

On a related note, shouldn't this module be using the forms API more?

CommentFileSizeAuthor
translation_table_check_plain.patch968 bytesgeodaniel

Comments

pasqualle’s picture

pasqualle
Location 🇭🇺 Budapest
commented
Status: Needs review » Fixed

Should be fixed with #451704: Various improvements

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.