fix(descriptinfield): conversion to target requires escaping

btry · btry · commit b79cfa95ebc8 · 2022-08-02T14:23:29.000+02:00
diff --git a/inc/field/descriptionfield.class.php b/inc/field/descriptionfield.class.php
@@ -78,10 +78,10 @@ public function getValueForDesign(): string {
    public function getValueForTargetText($domain, $richText): ?string {
       $text = $this->question->fields['description'];
       if (!$richText) {
-         $text = nl2br(strip_tags(html_entity_decode(__($text, $domain))));
+         $text = Sanitizer::unsanitize(strip_tags(html_entity_decode(__($text, $domain))));
       }
 
-      return $text;
+      return Sanitizer::unsanitize(__($text, $domain));
    }
 
    public function moveUploads() {

Original file line number	Diff line number	Diff line change
`@@ -78,10 +78,10 @@ public function getValueForDesign(): string {`
`78`	`78`	`public function getValueForTargetText($domain, $richText): ?string {`
`79`	`79`	`$text = $this->question->fields['description'];`
`80`	`80`	`if (!$richText) {`
`81`		`- $text = nl2br(strip_tags(html_entity_decode(__($text, $domain))));`
	`81`	`+ $text = Sanitizer::unsanitize(strip_tags(html_entity_decode(__($text, $domain))));`
`82`	`82`	`}`
`83`	`83`
`84`		`- return $text;`
	`84`	`+ return Sanitizer::unsanitize(__($text, $domain));`
`85`	`85`	`}`
`86`	`86`
`87`	`87`	`public function moveUploads() {`