diff --git a/app/Http/Controllers/OverviewController.php b/app/Http/Controllers/OverviewController.php index 000518804c..bdc4d911e1 100644 --- a/app/Http/Controllers/OverviewController.php +++ b/app/Http/Controllers/OverviewController.php @@ -103,7 +103,7 @@ class OverviewController extends Controller $data = serialize(json_encode($data)); $dash_config = unserialize($data); $hide_dashboard_editor = UserPref::getPref($user, 'hide_dashboard_editor'); - $widgets = Widget::select('widget_id', 'widget_title')->orderBy('widget_title')->get(); + $widgets = Widget::select(['widget_id', 'widget_title'])->orderBy('widget_title')->get(); $user_list = []; if ($user->can('manage', User::class)) { diff --git a/app/Http/Controllers/Widgets/WidgetController.php b/app/Http/Controllers/Widgets/WidgetController.php index a58f8e073b..34d6b8ed7d 100644 --- a/app/Http/Controllers/Widgets/WidgetController.php +++ b/app/Http/Controllers/Widgets/WidgetController.php @@ -142,7 +142,7 @@ abstract class WidgetController extends Controller return response()->json([ 'status' => $status, - 'title' => __($title), + 'title' => htmlentities(__($title)), 'html' => $html, 'show_settings' => $show_settings, 'settings' => $settings,