Template escaping

2022-08-23 22:18:14 +02:00
parent 27acc17eac
commit 435b9f4541
12 changed files with 25 additions and 24 deletions
--- a/site/snippets/layouts.php
+++ b/site/snippets/layouts.php
@@ -11,9 +11,9 @@
 */
 ?>
 <?php foreach ($field->toLayouts() as $layout): ?>
-<section class="grid margin-xl" id="<?= $layout->id() ?>" style="--gutter: 1.5rem">
+<section class="grid margin-xl" id="<?= esc($layout->id(), 'attr') ?>" style="--gutter: 1.5rem">
  <?php foreach ($layout->columns() as $column): ?>
-  <div class="column" style="--columns:<?= $column->span() ?>">
+  <div class="column" style="--columns:<?= esc($column->span(), 'css') ?>">
    <div class="text">
      <?= $column->blocks() ?>
    </div>