Duplicate Unescaped phrase in Template bb_code_button_manager_list

[Kirby]

Affected version

2.1.0 Beta 2

tooltip="{{ phrase('enable_disable_x', {'title': $editorDropdown.title}) }}" />

This should be either escaped in the template or the templater code should generally take care of this:

Fixed - Unescaped phrase in \XF\Template\Templater::getDataRowCell()

Phrase delete is not escaped when used in \XF\Template\Templater::getDataRowCell() for a title attribute. if (!$tooltip) { $tooltip = \XF::phrase('delete'); } $html = "";

xenforo.com

 

[Chris D]

This is essentially the same as your other report.