hazza/Phraseanet
1
0
Fork 0
mirror of https://github.com/alchemy-fr/Phraseanet.git synced 2025-10-15 22:13:13 +00:00
Code Issues Packages Projects Releases Wiki Activity

PHRAS-3800_xss (#4219)

Browse Source 
* add encode option to record::get_title ; render preview.record_title in twig

* html-escape facet values
This commit is contained in:
jygaulier
2023-03-15 11:05:34 +01:00
committed by GitHub
parent 32ff2739ab
commit e7027c7220
31 changed files with 241 additions and 158 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
lib/Alchemy/Phrasea/Model/Serializer/ESRecordSerializer.php
View File

@@ -10,9 +10,11 @@
namespace Alchemy\Phrasea\Model\Serializer;
use record_adapter;
class ESRecordSerializer extends AbstractSerializer
{
public function serialize(\record_adapter $record)
public function serialize(record_adapter $record)
{
$caption = $business = $status = [];
@@ -61,7 +63,7 @@ class ESRecordSerializer extends AbstractSerializer
'collection_id' => $record->getCollectionId(),
'base_id' => $record->getBaseId(),
'mime_type' => $record->getMimeType(),
'title' => $record->get_title(),
'title' => $record->get_title(['encode'=> record_adapter::ENCODE_NONE]),
'original_name' => $record->get_original_name(),
'updated_on' => $record->getUpdated()->format(DATE_ATOM),
'created_on' => $record->getCreated()->format(DATE_ATOM),