fix xss (#2060)

2020-10-26 11:35:31 +01:00
parent 7ae55c1980
commit 6db21d7b34
28 changed files with 157 additions and 91 deletions
--- a/templates/default/_form_delete.html.twig
+++ b/templates/default/_form_delete.html.twig
@@ -13,7 +13,7 @@
                    {{ form_widget(form) }}
                </div>
            {% else %}
-                <p>{{ message|raw }}</p>
+                <p>{{ message }}</p>
                {{ form_widget(form) }}
            {% endif %}            
        {% endblock %}