From cb432c5069b304ccfbdd7026da4ed407c94fc6b2 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Mateusz=20D=C4=99bi=C5=84ski?= <mateusz.debinski@ibexa.co>
Date: Tue, 13 Feb 2024 11:53:32 +0100
Subject: [PATCH] IBX-7442: Added escape filter html attribute on item_label

---
 .../themes/admin/ui/component/dropdown/dropdown_item.html.twig  | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/bundle/Resources/views/themes/admin/ui/component/dropdown/dropdown_item.html.twig b/src/bundle/Resources/views/themes/admin/ui/component/dropdown/dropdown_item.html.twig
index ba95fb9c86..c088538f7c 100644
--- a/src/bundle/Resources/views/themes/admin/ui/component/dropdown/dropdown_item.html.twig
+++ b/src/bundle/Resources/views/themes/admin/ui/component/dropdown/dropdown_item.html.twig
@@ -14,7 +14,7 @@
     {% set is_selected = custom_form ? choice.value == value : choice is selectedchoice(value) %}
     <li
         data-value="{{ choice.value }}"
-        data-filter-value="{{ item_label }}"
+        data-filter-value="{{ item_label|e('html_attr') }}"
         {% if choice.icon is defined %}
             data-choice-icon="{{ choice.icon }}"
         {% endif %}