—

DRUPAL-CONTRIB-2023-043

Details

Provides [highlight.php](https://github.com/scrivo/highlight.php "highlight.php") integration to Drupal, allowing <code> blocks to be automatically highlighted with the correct language.

The module's Twig function doesn't sufficiently filter user-entered data.

Are you affected?

Enter the version of the package you're using.

Affected packages

Packagist:https://packages.drupal.org/8/drupal/highlight_php

Introduced in: 0Fixed in: 1.0.1

Upgrade drupal/highlight_php to 1.0.1 or newer (ecosystem packagist:https://packages.drupal.org/8).

References

https://www.drupal.org/sa-contrib-2023-043[WEB]