Work: Remove xss for comment list

2 years ago · 80d1a8c906
parent ababd8850d
commit 80d1a8c906
1 changed files with 1 additions and 1 deletions
--- a/main/template/default/work/comments.tpl
+++ b/main/template/default/work/comments.tpl
@ -13,7 +13,7 @@
        </div>
        <p>
            {% if comment.comment is not empty %}
-                {{ comment.comment }}
+                {{ comment.comment|remove_xss }}
            {% else %}
                {{ 'HereIsYourFeedback' | get_lang }}
            {% endif %}