diff --git a/CHANGELOG-3.0.md b/CHANGELOG-3.0.md index 196940e316..9b42b7d330 100644 --- a/CHANGELOG-3.0.md +++ b/CHANGELOG-3.0.md @@ -7,6 +7,7 @@ - Fixes: - [Admin] Sanitize extension title in admin panel. + - [Blocks] Sanitize block title and description in position placement management view. - [ZAuth] Generic response message in lost password functionality to avoid account enumeration. - Features: diff --git a/src/system/BlocksModule/Resources/views/Placement/edit.html.twig b/src/system/BlocksModule/Resources/views/Placement/edit.html.twig index 33053eb9b2..4319f80907 100644 --- a/src/system/BlocksModule/Resources/views/Placement/edit.html.twig +++ b/src/system/BlocksModule/Resources/views/Placement/edit.html.twig @@ -50,7 +50,7 @@ {{ block.bid }} - {{ block.title|safeHtml|default('') }}{% if block.title and block.description %}, {% endif %}{{ block.description|safeHtml }} + {{ block.title|default('') }}{% if block.title and block.description %}, {% endif %}{{ block.description }} {{ block.module.name }} {{ block.blocktype }}