Fixes unescaped model attribute brakeman error in meetings/show.html.…

…haml
codebar · Dec 11, 2023 · 3dc6596 · 3dc6596
1 parent 888aa88
commit 3dc6596
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/app/views/meetings/show.html.haml b/app/views/meetings/show.html.haml
@@ -14,7 +14,7 @@
 
     .col-md-7.col-sm-12
       %h4 Agenda
-      %p= @meeting.description.html_safe
+      %p= sanitize(@meeting.description)
 
 .py-4.py-lg-5.bg-light
   .container