fix(description): simple text may render HTML tags

Signed-off-by: Thierry Bugier <tbugier@teclib.com>
pluginsGLPI · Sep 15, 2020 · dc82b19 · dc82b19
1 parent 5fedd96
commit dc82b19
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/inc/fields/descriptionfield.class.php b/inc/fields/descriptionfield.class.php
@@ -69,7 +69,7 @@ public function getValueForDesign() {
    public function getValueForTargetText($richText) {
       $text = $this->question->fields['description'];
       if (!$richText) {
-         $text = nl2br(html_entity_decode($text));
+         $text = nl2br(strip_tags(html_entity_decode($text)));
       }
 
       return $text;