Merge pull request from GHSA-h6m7-j4h3-9rf5

Sanitize request input before passing it to expression language evaluator

src/Bundle/Grid/Parser/OptionsParser.php

@@ -79,7 +79,7 @@ private function parseOptionExpression(string $expression, Request $request)
         $expression = (string) preg_replace_callback('/\$(\w+)/', function (array $matches) use ($request) {
             $variable = $request->get($matches[1]);
 
-            return is_string($variable) ? sprintf('"%s"', $variable) : $variable;
+            return is_string($variable) ? sprintf('"%s"', addslashes($variable)) : $variable;
         }, $expression);
 
         return $this->expression->evaluate($expression, ['container' => $this->container]);