Feeling Lucky
PR-5.4-dev
[#47615] - Fix: Improve JGrid custom data attribute handling and HTML escaping
- Closed
- 17 Apr 2026
- Medium
- Build: 5.4-dev
- # 47615
- Diff
- jiteshkhatri11:fix/jgrid-custom-attribute
User tests: Successful: Unsuccessful:
Summary of Changes
Fix JGrid custom data attribute handling and improve HTML escaping for safer output.
Testing Instructions
- Open Joomla administrator list views
- Inspect JGrid action buttons in browser dev tools
- Verify custom data attributes are correctly rendered
- Ensure HTML is properly escaped and no raw unsafe attributes appear
Expected result
- Custom data attributes render correctly
- No XSS or unsafe HTML output
- UI remains unchanged
Actual result
JGrid now properly handles custom attributes with safe escaping
Documentation Changes Required
No
BC Break?
No
Related Issues
None
Additional Notes
This improves security and extensibility of JGrid helper output.
| Status | New | ⇒ | Pending |
joomla-cms-bot
- | Category | ⇒ | Libraries |
| Status | Pending | ⇒ | Closed |
| Closed_Date | 0000-00-00 00:00:00 | ⇒ | 2026-04-17 11:08:12 |
| Closed_By | ⇒ | jiteshkhatri11 | |
| Labels |
Added:
PR-5.4-dev
|
||
There is a reason you were given a template to complete when submitting your PR. Please update your pr description with the required information - you can find the template here https://github.com/joomla/joomla-cms/blob/5.4-dev/.github/PULL_REQUEST_TEMPLATE.md