fix xss (#2060)

2020-10-26 11:35:31 +01:00
parent 7ae55c1980
commit 6db21d7b34
28 changed files with 157 additions and 91 deletions
--- a/templates/export/index.html.twig
+++ b/templates/export/index.html.twig
@@ -116,7 +116,7 @@
                    </td>
                    <td class="{{ tables.data_table_column_class(tableName, columns, 'activity') }}">{{ widgets.label_activity(entry.activity) }}</td>
                    <td class="{{ tables.data_table_column_class(tableName, columns, 'description') }}">
-                        {{ entry.description|escape|desc2html }}
+                        {{ entry.description|desc2html }}
                    </td>
                    <td class="{{ tables.data_table_column_class(tableName, columns, 'unit_price') }}">
                        {{ rate|money(currency) }}