fix(@bazar/layout.field.twig): prevent XSS scripts

YesWiki · Apr 8, 2022 · 2e6f465 · 2e6f465
1 parent 19952b4
commit 2e6f465
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/tools/bazar/templates/layouts/field.twig b/tools/bazar/templates/layouts/field.twig
@@ -7,7 +7,7 @@
     {% endblock %}
     {% block value_container %}
         <span class="BAZ_texte">
-            {% block value %}{{ value|raw }}{% endblock %}
+            {% block value %}{{ value|raw|e }}{% endblock %}
         </span>
     {% endblock %}
 </div>