fix xss (#2060)

2020-10-26 11:35:31 +01:00
parent 7ae55c1980
commit 6db21d7b34
28 changed files with 157 additions and 91 deletions
--- a/templates/export/pdf-layout.html.twig
+++ b/templates/export/pdf-layout.html.twig
@@ -263,7 +263,7 @@ mpdf-->
                    {{ entry.project.customer.name }} - {{ entry.project.name }}{% if entry.activity is not null %} - {{ entry.activity.name }}{% endif %}
                    {% if entry.description is not empty %}
                        <br>
-                        <i>{{ entry.description|escape|desc2html }}</i>
+                        <i>{{ entry.description|desc2html }}</i>
                    {% endif %}
                </td>
                <td class="duration">{{ entry.duration|duration(decimal) }}</td>