button: htmlEncode the name/id for the confirm message

so we don't accidentally interpret html tags

Signed-off-by: Dominik Csapak <d.csapak@proxmox.com>
This commit is contained in:
Dominik Csapak 2025-01-14 12:44:52 +01:00 committed by Fabian Grünbichler
parent 867bf7e6f5
commit 7bb124c036

View File

@ -141,7 +141,7 @@ Ext.define('Proxmox.button.StdRemoveButton', {
} else { } else {
text = gettext('Are you sure you want to remove entry {0}'); text = gettext('Are you sure you want to remove entry {0}');
} }
return Ext.String.format(text, `'${name}'`); return Ext.String.format(text, Ext.htmlEncode(`'${name}'`));
}, },
handler: function(btn, event, rec) { handler: function(btn, event, rec) {