[Debug] HTML-escape array key

c960657 · c960657 · commit 1ebbabd0a6fa · 2017-07-26T16:00:16.000+02:00
diff --git a/src/Symfony/Component/Debug/ExceptionHandler.php b/src/Symfony/Component/Debug/ExceptionHandler.php
@@ -419,7 +419,7 @@ private function formatArgs(array $args)
                 $formattedValue = str_replace("\n", '', var_export($this->escapeHtml((string) $item[1]), true));
             }
 
-            $result[] = is_int($key) ? $formattedValue : sprintf("'%s' => %s", $key, $formattedValue);
+            $result[] = is_int($key) ? $formattedValue : sprintf("'%s' => %s", $this->escapeHtml($key), $formattedValue);
         }
 
         return implode(', ', $result);

Original file line number	Diff line number	Diff line change
`@@ -419,7 +419,7 @@ private function formatArgs(array $args)`
`419`	`419`	`$formattedValue = str_replace("\n", '', var_export($this->escapeHtml((string) $item[1]), true));`
`420`	`420`	`}`
`421`	`421`
`422`		`- $result[] = is_int($key) ? $formattedValue : sprintf("'%s' => %s", $key, $formattedValue);`
	`422`	`+ $result[] = is_int($key) ? $formattedValue : sprintf("'%s' => %s", $this->escapeHtml($key), $formattedValue);`
`423`	`423`	`}`
`424`	`424`
`425`	`425`	`return implode(', ', $result);`