Preconditions and environment

• Magento version 2.4.8-p1

5c6d83d

This change produced unnecessary and unreliable escaped product names in GraphQL responses. The GraphQL endpoint should never return escaped values for several reasons:

1. Not every platform works with HTML entities, this prevents names from being rendered correctly in native apps.
2. The rest of the GraphQL API does not returned escaped variables. This gives developers a false sense of security, and could introduce real security issues when a developer assumes this happens everywhere.
3. This was a breaking change.

Steps to reproduce

1. In Magento admin, create a product with a special character in the name. For example >.
2. Query the name from that product using GraphQL.

Expected result

It should return unescaped > in the name.

Actual result

The GraphQL API returns the escaped greater than sign >

Additional information

No response

Release note

No response

Triage and priority

• Severity: S0 - Affects critical data or functionality and leaves users without workaround.
• Severity: S1 - Affects critical data or functionality and forces users to employ a workaround.
• Severity: S2 - Affects non-critical data or functionality and forces users to employ a workaround.
• Severity: S3 - Affects non-critical data or functionality and does not force users to employ a workaround.
• Severity: S4 - Affects aesthetics, professional look and feel, “quality” or “usability”.