[somethingwithproof]

Description

The List view printed the device description, location, site name and Monitor Text without the escaping the other Monitor views apply. form_selectable_cell() outputs its argument as-is, so a name containing characters like < or & was displayed wrongly. This wraps those four fields in html_escape() in renderHostList(), so the List view matches the Tiles, Tree and Names views.

Related Issue

None.

Motivation and Context

The List view was the only view that did not escape these fields.

How Has This Been Tested?

Added a Pest test that renders a List row for a device whose description, location, site name and Monitor Text contain <, & and quotes, and checks for the escaped form. It fails without the change and passes with it. The full suite passes (123 tests).

Screenshots (if appropriate):

Types of changes

• Bug fix (non-breaking change which fixes an issue)
• New feature (non-breaking change which adds functionality)
• Breaking change (fix or feature that would cause existing functionality to change)

Checklist:

• My code follows the code style of this project.
• My change requires a change to the documentation.
• I have updated the documentation repository accordingly.

[TheWitness]

Use ecell() instead of html_escape()

[somethingwithproof]

Switched the four fields to form_selectable_ecell() and rebased onto develop.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud