don't HTML encode quotes in REST API callback, to fix ONKI Selector

(cherry picked from commit 68d90a4)
NatLibFi · Oct 29, 2024 · 15d2760 · 15d2760
1 parent 4fd4c5e
commit 15d2760
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/controller/RestController.php b/controller/RestController.php
@@ -25,7 +25,7 @@ private function returnJson($data)
         // wrap with JSONP callback if requested
         if (filter_input(INPUT_GET, 'callback', FILTER_SANITIZE_FULL_SPECIAL_CHARS)) {
             header("Content-type: application/javascript; charset=utf-8");
-            echo filter_input(INPUT_GET, 'callback', FILTER_SANITIZE_FULL_SPECIAL_CHARS) . "(" . json_encode($data) . ");";
+            echo filter_input(INPUT_GET, 'callback', FILTER_SANITIZE_FULL_SPECIAL_CHARS, FILTER_FLAG_NO_ENCODE_QUOTES) . "(" . json_encode($data) . ");";
             return;
         }