MDL-71303 core: HTML not escaped in block skip link

NoelDeMartin · Apr 9, 2021 · 0aa65ae · 0aa65ae
1 parent 18aafd0
commit 0aa65ae
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/lib/templates/block.mustache b/lib/templates/block.mustache
@@ -16,7 +16,7 @@
 }}
 {{! Block Skip Link }}
 {{#showskiplink}}
-  <a href="#sb-{{skipid}}" class="sr-only sr-only-focusable">{{#str}}skipa, access, {{title}}{{/str}}</a>
+  <a href="#sb-{{skipid}}" class="sr-only sr-only-focusable">{{#str}}skipa, access, {{{title}}}{{/str}}</a>
 {{/showskiplink}}
 
 {{! Start Block Container }}