fix xss (#2060)

2020-10-26 11:35:31 +01:00
parent 7ae55c1980
commit 6db21d7b34
28 changed files with 157 additions and 91 deletions
--- a/templates/export/renderer/default.html.twig
+++ b/templates/export/renderer/default.html.twig
@@ -440,7 +440,7 @@
                        </td>
                        <td class="column-description" {% if not columns.description %}style="display: none"{% endif %}>
                            {% if entry.description is not empty %}
-                                {{ entry.description|escape|desc2html }}
+                                {{ entry.description|desc2html }}
                            {% endif %}
                        </td>
                        <td class="column-exported" {% if not columns.exported %}style="display: none"{% endif %}>