diff --git a/app/code/Magento/CatalogWidget/view/adminhtml/templates/product/widget/conditions.phtml b/app/code/Magento/CatalogWidget/view/adminhtml/templates/product/widget/conditions.phtml index 4b1750eba9f19..56b97ef9fd736 100644 --- a/app/code/Magento/CatalogWidget/view/adminhtml/templates/product/widget/conditions.phtml +++ b/app/code/Magento/CatalogWidget/view/adminhtml/templates/product/widget/conditions.phtml @@ -4,16 +4,19 @@ * See COPYING.txt for license details. */ -/** @var \Magento\CatalogWidget\Block\Product\Widget\Conditions $block */ +/** + * @var \Magento\CatalogWidget\Block\Product\Widget\Conditions $block + * @var \Magento\Framework\Escaper $escaper + */ /** @var \Magento\Framework\View\Helper\SecureHtmlRenderer $secureRenderer */ $element = $block->getElement(); -$fieldId = $element->getHtmlContainerId() ? ' id="' . $block->escapeHtmlAttr($element->getHtmlContainerId()) . '"' : ''; -$fieldClass = 'field admin__field field-' . $block->escapeHtmlAttr($element->getId()) . ' ' - . $block->escapeHtmlAttr($element->getCssClass()); +$fieldId = $element->getHtmlContainerId() ? ' id="' . $escaper->escapeHtmlAttr($element->getHtmlContainerId()) . '"' : ''; +$fieldClass = 'field admin__field field-' . $escaper->escapeHtmlAttr($element->getId()) . ' ' + . $escaper->escapeHtmlAttr($element->getCssClass()); $fieldClass .= $element->getRequired() ? ' required' : ''; $fieldAttributes = $fieldId . ' class="' . $fieldClass . '" ' - . $block->getUiId('form-field', $block->escapeHtmlAttr($element->getId())); + . $block->getUiId('form-field', $escaper->escapeHtmlAttr($element->getId())); ?>