Commit 6c424c4d authored by Rob Phillips's avatar Rob Phillips
Browse files

Issue #3324135 by robphillips: Pass configurable text through XSS filter.

parent b49fa52f

src/CommentDeleteManager.php

+2 −1
Original line number Diff line number Diff line
@@ -3,6 +3,7 @@ 
namespace Drupal\comment_delete;



use Drupal\comment\CommentInterface;

use Drupal\Component\Utility\Xss;

use Drupal\Core\Database\Connection;

use Drupal\Core\Entity\EntityFieldManagerInterface;

use Drupal\Core\Entity\EntityStorageInterface;
@@ -125,7 +126,7 @@ class CommentDeleteManager implements CommentDeleteManagerInterface { 
    }



    if (trim($this->config['message'][$op])) {

      $this->messenger->addStatus($this->config['message'][$op]);

      $this->messenger->addStatus(Xss::filterAdmin($this->config['message'][$op]));

    }

  }