Skip to content
Snippets Groups Projects
Commit bfa4ad3b authored by srosse's avatar srosse
Browse files

OO-5198: don't escape booking description with HTML code

parent 0cf45e67
No related branches found
No related tags found
No related merge requests found
......@@ -76,7 +76,9 @@ public class PaypalSmartButtonAccessController extends FormBasicController imple
String description = link.getOffer().getDescription();
if(StringHelper.containsNonWhitespace(description)) {
description = Formatter.escWithBR(description).toString();
if(!StringHelper.isHtml(description)) {
description = Formatter.escWithBR(description).toString();
}
description = StringHelper.xssScan(description);
layoutCont.contextPut("description", description);
}
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment