Escape title used in an HTML attribute.

[arkhi]

This closes #84.

(Also use ellipsis instead of ...)

[ricardo118]

can also be solved using 'title' => htmlspecialchars($child->menu()), or 'title' => strip_tags($child->menu()),
on the file
system\src\Grav\Common\Flex\Types\Pages\PageIndex.php Line 492

[arkhi]

can also be solved using 'title' => htmlspecialchars($child->menu()), or 'title' => strip_tags($child->menu()),
on the file
system\src\Grav\Common\Flex\Types\Pages\PageIndex.php Line 492

Wouldn’t that cause the title to be displayed incorrectly or without its semantic?

[w00fz]

This is already fixed with getgrav/grav@1396525

[mahagr]

Quick comment here, too: title is a text field, it should in no circumstances accept HTML. The frontend themes should also escape it.