From 462eb596027fd949efbf9ac5cb2b376805e9d246 Mon Sep 17 00:00:00 2001
From: mollux <mattias.michaux@dropsolid.com>
Date: Mon, 23 May 2022 13:55:13 +0200
Subject: [PATCH] Merge pull request from GHSA-pjpc-87mp-4332

* sanitise user agent before displaying

* Update app/bundles/EmailBundle/Views/SubscribedEvents/Timeline/index.html.php

Co-authored-by: John Linhart <admin@escope.cz>

* removed obsolete use statement

Co-authored-by: John Linhart <admin@escope.cz>
---
 .../EmailBundle/Views/SubscribedEvents/Timeline/index.html.php | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/app/bundles/EmailBundle/Views/SubscribedEvents/Timeline/index.html.php b/app/bundles/EmailBundle/Views/SubscribedEvents/Timeline/index.html.php
index a7613b3bc89..d74a1d91384 100755
--- a/app/bundles/EmailBundle/Views/SubscribedEvents/Timeline/index.html.php
+++ b/app/bundles/EmailBundle/Views/SubscribedEvents/Timeline/index.html.php
@@ -8,6 +8,7 @@
  *
  * @license     GNU/GPLv3 http://www.gnu.org/licenses/gpl-3.0.html
  */
+
 if ($item = ((isset($event['extra'])) ? $event['extra']['stat'] : false)): ?>
     <p>
         <?php if (!empty($item['isFailed'])) : ?>
@@ -63,7 +64,7 @@
             endif;
             ?>
             <?php if ($counter > 1): ?><hr/><?php endif; ?>
-            <strong><?php echo $view['date']->toText($detail['datetime'], 'UTC'); ?></strong><br/><?php echo $detail['useragent']; ?>
+            <strong><?php echo $view['date']->toText($detail['datetime'], 'UTC'); ?></strong><br/><?php echo $view->escape($detail['useragent']); ?>
             <?php ++$counter; ?>
         <?php endforeach; ?>
         <?php