Merge branch '2.3' of ezsystems/ezplatform-admin-ui into 4.6 (#1311)

Author: dew326

src/bundle/Resources/public/js/scripts/fieldType/ezbinaryfile.js

@@ -13,9 +13,11 @@
             const sizeContainer = preview.querySelector('.ibexa-field-edit-preview__file-size');
             const files = [].slice.call(event.target.files);
             const fileSize = this.formatFileSize(files[0].size);
+            const { escapeHTML } = ibexa.helpers.text;
+            const fileName = escapeHTML(files[0].name);
 
-            nameContainer.innerHTML = files[0].name;
-            nameContainer.title = files[0].name;
+            nameContainer.innerHTML = fileName;
+            nameContainer.title = fileName;
             sizeContainer.innerHTML = fileSize;
             sizeContainer.title = fileSize;
 

src/bundle/Resources/public/js/scripts/fieldType/ezimage.js

@@ -34,6 +34,8 @@
             const sizeContainer = preview.querySelector('.ibexa-field-edit-preview__file-size');
             const files = [].slice.call(event.target.files);
             const fileSize = this.formatFileSize(files[0].size);
+            const { escapeHTML } = ibexa.helpers.text;
+            const fileName = escapeHTML(files[0].name);
 
             this.getImageUrl(files[0], (url) => {
                 const image = new Image();
@@ -60,8 +62,8 @@
                 imageNode.setAttribute('src', url);
             });
 
-            nameContainer.innerHTML = files[0].name;
-            nameContainer.title = files[0].name;
+            nameContainer.innerHTML = fileName;
+            nameContainer.title = fileName;
             sizeContainer.innerHTML = fileSize;
             sizeContainer.title = fileSize;
 

src/bundle/Resources/public/js/scripts/fieldType/ezmedia.js

@@ -52,9 +52,11 @@
             const sizeContainer = preview.querySelector('.ibexa-field-edit-preview__file-size');
             const files = [].slice.call(event.target.files);
             const fileSize = this.formatFileSize(files[0].size);
+            const { escapeHTML } = ibexa.helpers.text;
+            const fileName = escapeHTML(files[0].name);
 
-            nameContainer.innerHTML = files[0].name;
-            nameContainer.title = files[0].name;
+            nameContainer.innerHTML = fileName;
+            nameContainer.title = fileName;
             sizeContainer.innerHTML = fileSize;
             sizeContainer.title = fileSize;