[SECURITY] Fix stored XSS in help texts

2022-02-17 22:19:15 +01:00
parent 6d6883b343
commit a66fdc5084
3 changed files with 6 additions and 4 deletions
--- a/src/pretix/base/forms/questions.py
+++ b/src/pretix/base/forms/questions.py
@@ -705,7 +705,7 @@ class BaseQuestionsForm(forms.Form):
                    label=label, required=required,
                    min_value=q.valid_number_min or Decimal('0.00'),
                    max_value=q.valid_number_max,
-                    help_text=q.help_text,
+                    help_text=help_text,
                    initial=initial.answer if initial else None,
                )
            elif q.type == Question.TYPE_STRING: