diff --git a/core/modules/forum/forum.module b/core/modules/forum/forum.module index c82c167b54b118632a23342320d40d6d84889ee5..342ed7b9998b87ede05f618414a1b23504fc35d3 100644 --- a/core/modules/forum/forum.module +++ b/core/modules/forum/forum.module @@ -501,7 +501,12 @@ function template_preprocess_forums(&$variables) { } $row[] = array( - 'data' => $topic->comment_count . $new_replies, + 'data' => [ + [ + '#prefix' => $topic->comment_count, + '#markup' => $new_replies, + ], + ], 'class' => array('forum__replies'), ); $row[] = array( diff --git a/core/modules/forum/src/Tests/ForumTest.php b/core/modules/forum/src/Tests/ForumTest.php index 974e4009c19157d77b99b0cde6b8611c32a0976f..c81828ecae839199c1e54f1481cc9f51f524fb9e 100644 --- a/core/modules/forum/src/Tests/ForumTest.php +++ b/core/modules/forum/src/Tests/ForumTest.php @@ -514,6 +514,9 @@ function testForumWithNewPost() { // Check that forum renders properly. $this->drupalGet("forum/{$this->forum['tid']}"); $this->assertResponse(200); + + // Verify there is no unintentional HTML tag escaping. + $this->assertNoEscaped('<', ''); } /**