fix(descriptinfield): conversion to target requires escaping

pluginsGLPI · Aug 2, 2022 · b79cfa9 · b79cfa9
1 parent df62b22
commit b79cfa9
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/inc/field/descriptionfield.class.php b/inc/field/descriptionfield.class.php
@@ -78,10 +78,10 @@ public function getValueForDesign(): string {
    public function getValueForTargetText($domain, $richText): ?string {
       $text = $this->question->fields['description'];
       if (!$richText) {
-         $text = nl2br(strip_tags(html_entity_decode(__($text, $domain))));
+         $text = Sanitizer::unsanitize(strip_tags(html_entity_decode(__($text, $domain))));
       }
 
-      return $text;
+      return Sanitizer::unsanitize(__($text, $domain));
    }
 
    public function moveUploads() {