Commit 7f457c9
committed
fix: apply same sanitize-render pattern to multiselect editable
Follow-up to the previous commit. The multiselect editable uses the
same transformDocumentEditableStoreToOptions as the single select,
so after switching the transform to return plain strings, its labels
would render unsanitized without explicit render props.
Wire the shared renderSanitizedLabel helper into labelRender and
optionRender, restoring XSS protection for the multi-select case
while keeping the built-in search filter working
(optionFilterProp="label" against a plain string).1 parent bc6669f commit 7f457c9
File tree
1 file changed
+3
-0
lines changed- assets/js/src/core/modules/element/dynamic-types/definitions/document/editable/components/multiselect-editable
1 file changed
+3
-0
lines changedLines changed: 3 additions & 0 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
13 | 13 | | |
14 | 14 | | |
15 | 15 | | |
| 16 | + | |
16 | 17 | | |
17 | 18 | | |
18 | 19 | | |
| |||
54 | 55 | | |
55 | 56 | | |
56 | 57 | | |
| 58 | + | |
57 | 59 | | |
58 | 60 | | |
59 | 61 | | |
| 62 | + | |
60 | 63 | | |
61 | 64 | | |
62 | 65 | | |
| |||
0 commit comments