Skip to content

Commit bb9f46f

Browse files
authored
Remove html escaping in schedule title (elan-ev#1323)
It is not necessary to escape the title in the php code as vue automatically escapes html content in templates, see https://vuejs.org/guide/best-practices/security#html-content.
1 parent c41e7a8 commit bb9f46f

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

lib/Models/ScheduleHelper.php

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -794,11 +794,11 @@ public static function getScheduleList($course_id, $semester_filter)
794794
$issue = new \Issue(['issue_id' => $is]);
795795
$titles[] = my_substr($issue->getTitle(), 0, 80);
796796
}
797-
$title = count($titles) ? 'Themen: ' . htmlReady(my_substr(implode(', ', $titles), 0, 80)) : '';
797+
$title = count($titles) ? 'Themen: ' . my_substr(implode(', ', $titles), 0, 80) : '';
798798
} else {
799799
foreach ($issues as $is) {
800800
$issue = new \Issue(['issue_id' => $is]);
801-
$title = htmlReady(my_substr($issue->getTitle(), 0, 80));
801+
$title = my_substr($issue->getTitle(), 0, 80);
802802
}
803803
}
804804
}

0 commit comments

Comments
 (0)