Skip to content

Conversation

@markstory
Copy link
Member

PaginatorHelper::limitControl() will use the current request parameters to generate hidden inputs but was not correctly encoding input name attributes.

Fixes #19172
Refs #18985

PaginatorHelper::limitControl() will use the current request parameters
to generate hidden inputs but was not correctly encoding input name
attributes.

Fixes #19172
@dereuromark dereuromark merged commit b129306 into 5.x Jan 14, 2026
14 of 15 checks passed
@dereuromark dereuromark deleted the fix-limitcontrol branch January 14, 2026 03:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Possible XSS in Paginator Helper (limitControl() method)

4 participants