dev/core#3001 escape single quotes when rendering tokens in html format

civicrm · Dec 20, 2021 · e8d1234 · e8d1234
1 parent eedf2b1
commit e8d1234
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/Civi/Token/TokenRow.php b/Civi/Token/TokenRow.php
@@ -280,7 +280,7 @@ public function fill($format = NULL) {
                 $htmlTokens[$entity][$field] = \CRM_Utils_String::purifyHTML($value);
               }
               else {
-                $htmlTokens[$entity][$field] = is_object($value) ? $value : htmlentities($value);
+                $htmlTokens[$entity][$field] = is_object($value) ? $value : htmlentities($value, ENT_QUOTES);
               }
             }
           }