The results from hook_node_operations() are passed into an HTML select list, which does not allow HTML tags (or escapes them).

There is some question about these being used in VBO as well as checkbox labels.

Originally posted in #1138162: Raw tokens shown in UI for bulk operations and empty bookmarks page.

CommentFileSizeAuthor
#1 flag-strip-tags-2201703-01.patch906 bytesjhedstrom
Support from Acquia helps fund testing for Drupal Acquia logo

Comments

jhedstrom’s picture

jhedstrom
Primary language English
Location Portland, OR
CreditAttribution: jhedstrom commented
Status: Active » Needs review
FileSize
flag-strip-tags-2201703-01.patch906 bytes
joachim’s picture

joachim CreditAttribution: joachim commented

Yeah, someone needs to do some investigating to see if VBO has a combination of options that results in checkboxes for operations.