DEV: Escape the filter in the admin sidebar no results message (#27806)

This commit is contained in:
Sérgio Saquetim 2024-07-09 19:15:10 -03:00 committed by GitHub
parent bbd67eff08
commit 08891ccf06
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -6,6 +6,7 @@ import BaseCustomSidebarPanel from "discourse/lib/sidebar/base-custom-sidebar-pa
import BaseCustomSidebarSection from "discourse/lib/sidebar/base-custom-sidebar-section";
import BaseCustomSidebarSectionLink from "discourse/lib/sidebar/base-custom-sidebar-section-link";
import { ADMIN_PANEL } from "discourse/lib/sidebar/panels";
import { escapeExpression } from "discourse/lib/utilities";
import { getOwnerWithFallback } from "discourse-common/lib/get-owner";
import getURL from "discourse-common/lib/get-url";
import I18n from "discourse-i18n";
@ -362,7 +363,7 @@ export default class AdminSidebarPanel extends BaseCustomSidebarPanel {
filterNoResultsDescription(filter) {
const params = {
filter,
filter: escapeExpression(filter),
settings_filter_url: getURL(
`/admin/site_settings/category/all_results?filter=${encodeURIComponent(
filter