Escape page title in pages field

getgrav · Nov 16, 2020 · d01c959 · d01c959
1 parent b9ac46f
commit d01c959
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 1 deletion.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -6,6 +6,7 @@
     * Allow to fallback to `docs:` instead of `readme:`
     * Backported finder/pages navigation from 1.10 (you will still need 1.10 for the fancy Parent Picker)
     * Forward a `sid` to GPM when downloading a premium package
+    * Escape page title in `pages` field
 
 # v1.9.17
 ## 10/07/2020

diff --git a/themes/grav/templates/forms/fields/pages/pages.html.twig b/themes/grav/templates/forms/fields/pages/pages.html.twig
@@ -10,7 +10,7 @@
     {% endif %}
 
     {% for page_route, option in pages_list %}
-        <option {% if page_route == value or (field.multiple and page_route in value) %}selected="selected"{% endif %} value="{{ page_route }}">{{ option|raw }}</option>
+        <option {% if page_route == value or (field.multiple and page_route in value) %}selected="selected"{% endif %} value="{{ page_route }}">{{ option }}</option>
     {% endfor %}
 {% endmacro %}