Summary of Changes

The nested table class has a debug mode which can be enabled by developers to get additional output of the inner workings of that class. Without this PR, a full DB query (that i.e. might include HTML markup) would be outputted without any escaping, breaking the debug output with the then parsed HTML.

Testing Instructions

1. Login to the administrator area, navigate to the screen where you can create a new com_content category and fill that form - do not submit it yet!

Open administrator/components/com_categories/tables/category.php, enable debugging by adding the following property:

protected $_debug = 1;

Open libraries/src/Application/WebApplication and empty the redirect() method to suppress the redirect after save.

Hit save, see a debug output comparable to this screenshot.

Apply patch, restore redirect method, navigate to form again, empty the redirect method and save again. Check that the debug output still works.

Expected result

Debug output is escaped

Actual result

Debug output is unescaped

Documentation Changes Required

None