Verified Commit e28809ff authored by Théodore Biadala's avatar Théodore Biadala
Browse files

Issue #3426514 by magaki, Tom Konda, longwave: Drupal.theme.progressBar() does... 

Issue #3426514 by magaki, Tom Konda, longwave: Drupal.theme.progressBar() does not escape output correctly

(cherry picked from commit 1c9e2cff)
parent 0ebaa775

core/misc/progress.js

+2 −1
Original line number Diff line number Diff line
@@ -14,8 +14,9 @@ 
   *   The HTML for the progress bar.

   */

  Drupal.theme.progressBar = function (id) {

    const escapedId = Drupal.checkPlain(id);

    return (

      `<div id="${id}" class="progress" aria-live="polite">` +

      `<div id="${escapedId}" class="progress" aria-live="polite">` +

      '<div class="progress__label">&nbsp;</div>' +

      '<div class="progress__track"><div class="progress__bar"></div></div>' +

      '<div class="progress__percentage"></div>' +