* zin: change html corresponding strategy for html tag attribute, only convert existing entities.

2023-12-11 16:20:51 +08:00
parent a845e640e2
commit 4f0ce8d44b
1 changed files with 1 additions and 1 deletions
@@ -201,7 +201,7 @@ class props extends \zin\utils\dataset
            {
                if(!is_string($value)) $value = json_encode($value);

-                $pairs[] = $name . '="' . htmlspecialchars($value) . '"';
+                $pairs[] = $name . '="' . htmlspecialchars($value, ENT_QUOTES | ENT_SUBSTITUTE | ENT_HTML401, null, false) . '"';
            }
        }