X-Git-Url: https://vcs.fsf.org/?a=blobdiff_plain;f=Civi%2FApi4%2FUtils%2FFormattingUtil.php;h=21c3d4e6b59de29757925c3a5b3d86c601104b6d;hb=c77f9b14576dbe8314a82b2e4f19a170d3cc1695;hp=b3e114627269f9d2aafa719e7316c8e0bc39a0a4;hpb=eda4c5942ca6c0f3f394957acac921b9d3d9854e;p=civicrm-core.git

diff --git a/Civi/Api4/Utils/FormattingUtil.php b/Civi/Api4/Utils/FormattingUtil.php
index b3e1146272..21c3d4e6b5 100644
--- a/Civi/Api4/Utils/FormattingUtil.php
+++ b/Civi/Api4/Utils/FormattingUtil.php
@@ -65,6 +65,8 @@ class FormattingUtil {
         $params[$name] = 'null';
       }
     }
+
+    \CRM_Utils_API_HTMLInputCoder::singleton()->encodeRow($params);
   }
 
   /**
@@ -111,6 +113,11 @@ class FormattingUtil {
         $value = date('Ymd', strtotime($value));
         break;
     }
+
+    $hic = \CRM_Utils_API_HTMLInputCoder::singleton();
+    if (!$hic->isSkippedField($fieldSpec['name'])) {
+      $value = $hic->encodeValue($value);
+    }
   }
 
 }