From 0b186fb56fbc8d1778f5d6c15a7ffdf9e63313f7 Mon Sep 17 00:00:00 2001
From: Marcel Werk <burntime@woltlab.com>
Date: Tue, 10 Dec 2024 12:21:57 +0100
Subject: [PATCH] Add missing encoding of the url

---
 .../lib/system/gridView/renderer/LinkColumnRenderer.class.php  | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/wcfsetup/install/files/lib/system/gridView/renderer/LinkColumnRenderer.class.php b/wcfsetup/install/files/lib/system/gridView/renderer/LinkColumnRenderer.class.php
index 7d6fe7d9db..4feee84603 100644
--- a/wcfsetup/install/files/lib/system/gridView/renderer/LinkColumnRenderer.class.php
+++ b/wcfsetup/install/files/lib/system/gridView/renderer/LinkColumnRenderer.class.php
@@ -5,6 +5,7 @@ namespace wcf\system\gridView\renderer;
 use wcf\data\DatabaseObject;
 use wcf\system\request\LinkHandler;
 use wcf\system\WCF;
+use wcf\util\StringUtil;
 
 /**
  * Allows the setting of a link to a column.
@@ -31,7 +32,7 @@ class LinkColumnRenderer extends AbstractColumnRenderer implements ILinkColumnRe
             \array_merge($this->parameters, ['object' => $context])
         );
 
-        return '<a href="' . $href . '"'
+        return '<a href="' . StringUtil::encodeHTML($href) . '"'
             . ($this->titleLanguageItem ? ' title="' . WCF::getLanguage()->get($this->titleLanguageItem) . '"' : '') . '>'
             . $value
             . '</a>';
-- 
2.20.1