diff options
| author | Roger Rehnelt <noreply@maennchen1.de> | 2026-10-01 14:24:33 +0200 |
|---|---|---|
| committer | Roger Rehnelt <noreply@maennchen1.de> | 2026-10-01 14:24:33 +0200 |
| commit | 5dd036a24bd90943722798deb852b14a3d8aa0fc (patch) | |
| tree | a1f0914a8100ae5570259a5f9876dc680efb79ac | |
| parent | 4b8385250c3e7c80ea37600bb07c1741fc221b59 (diff) | |
Produktvorlagen: Detailname escapen
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
| -rw-r--r-- | views/produkttemplates/standard.phtml | 2 | ||||
| -rw-r--r-- | views/produkttemplates/standard3.phtml | 2 |
2 files changed, 2 insertions, 2 deletions
diff --git a/views/produkttemplates/standard.phtml b/views/produkttemplates/standard.phtml index 4cb73d7..b8d38c3 100644 --- a/views/produkttemplates/standard.phtml +++ b/views/produkttemplates/standard.phtml @@ -26,7 +26,7 @@ <?php if (!$this->titleDisplayed) { ?>
<h1 class="wpsg_producttitle"><?php echo $oProduct->getProductName(); ?></h1>
<?php if (($this->view['data']['detailname']??'') !== '' && $oProduct->getProductName() !== $this->view['data']['detailname']) { ?>
- <h2 class="wpsg_productdetailtitle"><?php echo $this->view['data']['detailname']; ?></h2>
+ <h2 class="wpsg_productdetailtitle"><?php echo wp_kses_post($this->view['data']['detailname']); ?></h2>
<?php } ?>
<?php } ?>
diff --git a/views/produkttemplates/standard3.phtml b/views/produkttemplates/standard3.phtml index af0206e..0938321 100644 --- a/views/produkttemplates/standard3.phtml +++ b/views/produkttemplates/standard3.phtml @@ -63,7 +63,7 @@ <?php if (!$this->titleDisplayed) { ?>
<h1 itemprop="name" class="wpsg_producttitle"><?php echo $this->getProductName($this->view['data']['id']); ?></h1>
<?php if (($this->view['data']['detailname']??'') !== '' && $this->getProductName($this->view['data']['id']) !== $this->view['data']['detailname']) { ?>
- <h2 itemprop="detailname" class="wpsg_productdetailtitle"><?php echo $this->view['data']['detailname']; ?></h2>
+ <h2 itemprop="detailname" class="wpsg_productdetailtitle"><?php echo wp_kses_post($this->view['data']['detailname']); ?></h2>
<?php } ?>
<?php } ?>
|