From 1d321b580c45ace40238c53f6c93bccf3988d484 Mon Sep 17 00:00:00 2001
From: Istvan Palinkas <pistvan@publishdrive.com>
Date: Mon, 29 Jan 2024 17:04:15 +0100
Subject: [PATCH 1/2] fix escaping

---
 resources/views/key_row.blade.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/resources/views/key_row.blade.php b/resources/views/key_row.blade.php
index b8a98833..dd65f88f 100644
--- a/resources/views/key_row.blade.php
+++ b/resources/views/key_row.blade.php
@@ -9,7 +9,7 @@
 @endphp
 @if(is_array($translation) && $isCatalog)
 <tr class="empty" data-base="{{ $parent_key . $key }}">
-    <td colspan="{{ 1 + sizeof($locales) + $deleteEnabled }}">{{ str_repeat("&nbsp;", $indent * 4) . $key }}</td>
+    <td colspan="{{ 1 + sizeof($locales) + $deleteEnabled }}">{!! str_repeat("&nbsp;", $indent * 4) . $key !!}</td>
 </tr>
     @foreach($translation as $key2 => $value2)
         @include('translation-manager::key_row', [
@@ -21,7 +21,7 @@
     @endforeach
 @else
 <tr data-parent="{{ rtrim($parent_key, '.') }}" id="{{ $parent_key . $key }}">
-    <td>{{ str_repeat("&nbsp;", $indent * 4) . $key }}</td>
+    <td>{!! str_repeat("&nbsp;", $indent * 4) . $key !!}</td>
     @foreach($locales as $locale)
         @php $t = isset($translation[$locale]) ? $translation[$locale] : null; @endphp
         <td>

From 8d748916def75fdfbb5a62f7752848021f09728e Mon Sep 17 00:00:00 2001
From: Istvan Palinkas <pistvan@publishdrive.com>
Date: Mon, 29 Jan 2024 17:06:58 +0100
Subject: [PATCH 2/2] more escape fix

---
 resources/views/key_row.blade.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/resources/views/key_row.blade.php b/resources/views/key_row.blade.php
index dd65f88f..6f33087f 100644
--- a/resources/views/key_row.blade.php
+++ b/resources/views/key_row.blade.php
@@ -34,7 +34,7 @@
                 data-type="textarea" 
                 data-pk="{{ $t ? $t->id : 0 }}" 
                 data-url="{{ route('translation-manager.edit', $group) }}" 
-                data-title="{{ trans('translation-manager::panel.rows.edit') }}">{{ $t ? htmlentities($t->value, ENT_QUOTES, 'UTF-8', false) : '' }}</a>
+                data-title="{{ trans('translation-manager::panel.rows.edit') }}">{!! $t ? htmlentities($t->value, ENT_QUOTES, 'UTF-8', false) : '' !!}</a>
         </td>
     @endforeach
     @if($deleteEnabled)