Fix: xss

Volmarg · Jul 3, 2021 · b861450 · b861450
1 parent 6897c33
commit b861450
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/templates/modules/my-todo/components/single-todo-group.html.twig b/templates/modules/my-todo/components/single-todo-group.html.twig
@@ -49,7 +49,7 @@
 
                     <div class="single-parent-task"
                         data-toggle-popover="true"                                {# popover attr #}
-                        data-content="{{ popover_description }}"                  {# popover attr #}
+                        data-content="{{ popover_description | escape }}"         {# popover attr #}
                         data-placement="top"                                      {# popover attr #}
                     >
                         {% include 'modules/my-todo/components/one-parent-task-todo.html.twig' with {