Commit 975c981
committed
fix: apply same sanitize-render pattern to multiselect editable
Follow-up to the previous commit. The multiselect editable uses the
same transformDocumentEditableStoreToOptions as the single select,
so after switching the transform to return plain strings, its labels
would render unsanitized without explicit render props.
Wire the shared renderSanitizedLabel helper into labelRender and
optionRender, restoring XSS protection for the multi-select case
while keeping the built-in search filter working
(optionFilterProp="label" against a plain string).1 parent 299a2e8 commit 975c981
File tree
1 file changed
+3
-0
lines changed- assets/js/src/core/modules/element/dynamic-types/definitions/document/editable/components/multiselect-editable
1 file changed
+3
-0
lines changedLines changed: 3 additions & 0 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
13 | 13 | | |
14 | 14 | | |
15 | 15 | | |
| 16 | + | |
16 | 17 | | |
17 | 18 | | |
18 | 19 | | |
| |||
54 | 55 | | |
55 | 56 | | |
56 | 57 | | |
| 58 | + | |
57 | 59 | | |
58 | 60 | | |
59 | 61 | | |
| 62 | + | |
60 | 63 | | |
61 | 64 | | |
62 | 65 | | |
| |||
0 commit comments