Escape the upgrade link
authorEileen McNaughton <emcnaughton@wikimedia.org>
Wed, 30 Mar 2022 01:43:54 +0000 (14:43 +1300)
committerEileen McNaughton <emcnaughton@wikimedia.org>
Wed, 30 Mar 2022 01:43:54 +0000 (14:43 +1300)
templates/CRM/Admin/Page/Extensions/Main.tpl

index e49e193d46f2a168fd5f2e0f51a12a95c59740e2..0d98485964b621a6699ba64449cc0adadaf8b975 100644 (file)
@@ -22,8 +22,8 @@ Depends: CRM/common/enableDisableApi.tpl and CRM/common/jsortable.tpl
         <tr id="extension-{$row.file|escape}" class="crm-entity crm-extension-{$row.file|escape}{if $row.status eq 'disabled'} disabled{/if}{if $row.status eq 'installed-missing' or $row.status eq 'disabled-missing'} extension-missing{/if}{if $row.status eq 'installed'} extension-installed{/if}">
           <td class="crm-extensions-label">
               <a class="collapsed" href="#"></a>&nbsp;<strong>{$row.label|escape}</strong><br/>{$row.description|escape}
-              {if $extAddNewEnabled && array_key_exists($extKey, $remoteExtensionRows) && $remoteExtensionRows[$extKey].upgradelink}
-                <div class="crm-extensions-upgrade">{$remoteExtensionRows[$extKey].upgradelink}</div>
+              {if $extAddNewEnabled && array_key_exists($extKey, $remoteExtensionRows) && $remoteExtensionRows[$extKey].upgradelink|smarty:nodefaults}
+                <div class="crm-extensions-upgrade">{$remoteExtensionRows[$extKey].upgradelink|smarty:nodefaults}</div>
               {/if}
           </td>
           <td class="crm-extensions-status">{$row.statusLabel} </td>