From: Marcel Werk <burntime@woltlab.com>
Date: Tue, 10 Dec 2024 11:21:57 +0000 (+0100)
Subject: Add missing encoding of the url
X-Git-Url: https://git.stricted.de/?a=commitdiff_plain;h=0b186fb56fbc8d1778f5d6c15a7ffdf9e63313f7;p=GitHub%2FWoltLab%2FWCF.git

Add missing encoding of the url
---

diff --git a/wcfsetup/install/files/lib/system/gridView/renderer/LinkColumnRenderer.class.php b/wcfsetup/install/files/lib/system/gridView/renderer/LinkColumnRenderer.class.php
index 7d6fe7d9db..4feee84603 100644
--- a/wcfsetup/install/files/lib/system/gridView/renderer/LinkColumnRenderer.class.php
+++ b/wcfsetup/install/files/lib/system/gridView/renderer/LinkColumnRenderer.class.php
@@ -5,6 +5,7 @@ namespace wcf\system\gridView\renderer;
 use wcf\data\DatabaseObject;
 use wcf\system\request\LinkHandler;
 use wcf\system\WCF;
+use wcf\util\StringUtil;
 
 /**
  * Allows the setting of a link to a column.
@@ -31,7 +32,7 @@ class LinkColumnRenderer extends AbstractColumnRenderer implements ILinkColumnRe
             \array_merge($this->parameters, ['object' => $context])
         );
 
-        return '<a href="' . $href . '"'
+        return '<a href="' . StringUtil::encodeHTML($href) . '"'
             . ($this->titleLanguageItem ? ' title="' . WCF::getLanguage()->get($this->titleLanguageItem) . '"' : '') . '>'
             . $value
             . '</a>';