Added field escaping when sorting

Author: createit-ru

core/components/fileman/elements/snippets/files.php

@@ -71,7 +71,7 @@
 }
 
 // sort
-$c->sortby($sortby, $sortdir);
+$c->sortby($modx->escape($sortby), $sortdir);
 
 $items = $modx->getIterator(File::class, $c);
 

core/components/fileman/src/Processors/File/SortBy.php

@@ -41,10 +41,10 @@ public function process()
 
 
         $sortColumn = $this->modx->getSelectColumns($this->classKey, $this->objectType, '', [$field]);
-        $criteria->sortby($sortColumn, 'ASC');
+        $criteria->sortby($this->modx->escape($sortColumn), 'ASC');
 
         $sortColumn2 = $this->modx->getSelectColumns($this->classKey, $this->objectType, '', ['id']);
-        $criteria->sortby($sortColumn2, 'ASC');
+        $criteria->sortby($this->modx->escape($sortColumn2), 'ASC');
 
         $files = $this->modx->getIterator($this->classKey, $criteria);