From 5dd036a24bd90943722798deb852b14a3d8aa0fc Mon Sep 17 00:00:00 2001
From: Roger Rehnelt <noreply@maennchen1.de>
Date: Thu, 1 Oct 2026 14:24:33 +0200
Subject: Produktvorlagen: Detailname escapen

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---
 views/produkttemplates/standard.phtml  | 2 +-
 views/produkttemplates/standard3.phtml | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/views/produkttemplates/standard.phtml b/views/produkttemplates/standard.phtml
index 4cb73d7..b8d38c3 100644
--- a/views/produkttemplates/standard.phtml
+++ b/views/produkttemplates/standard.phtml
@@ -26,7 +26,7 @@
 		<?php if (!$this->titleDisplayed) { ?>
 			<h1 class="wpsg_producttitle"><?php echo $oProduct->getProductName(); ?></h1>
 			<?php if (($this->view['data']['detailname']??'') !== '' && $oProduct->getProductName() !== $this->view['data']['detailname']) { ?>
-				<h2 class="wpsg_productdetailtitle"><?php echo $this->view['data']['detailname']; ?></h2>
+				<h2 class="wpsg_productdetailtitle"><?php echo wp_kses_post($this->view['data']['detailname']); ?></h2>
 			<?php } ?>
 		<?php }  ?>
 
diff --git a/views/produkttemplates/standard3.phtml b/views/produkttemplates/standard3.phtml
index af0206e..0938321 100644
--- a/views/produkttemplates/standard3.phtml
+++ b/views/produkttemplates/standard3.phtml
@@ -63,7 +63,7 @@
             <?php if (!$this->titleDisplayed) { ?>
                 <h1 itemprop="name" class="wpsg_producttitle"><?php echo $this->getProductName($this->view['data']['id']); ?></h1>
                 <?php if (($this->view['data']['detailname']??'') !== '' && $this->getProductName($this->view['data']['id']) !== $this->view['data']['detailname']) { ?>
-                    <h2 itemprop="detailname" class="wpsg_productdetailtitle"><?php echo $this->view['data']['detailname']; ?></h2>
+                    <h2 itemprop="detailname" class="wpsg_productdetailtitle"><?php echo wp_kses_post($this->view['data']['detailname']); ?></h2>
                 <?php } ?>
             <?php } ?>
 
-- 
cgit v1.2.3