[SECURITY] Fix XSS in ticket layout JSON (CVE-2026-57532)

2026-06-25 16:46:13 +02:00
parent 79c5160b57
commit f88c24863d
2 changed files with 2 additions and 4 deletions
@@ -19,9 +19,7 @@
        {% endif %}
    </h1>

-    <script type="application/json" id="editor-data">
-        {{ layout|safe }}
-    </script>
+    {{ layout|json_script:"editor-data" }}
    <div class="row">
        <div class="col-md-9">
            <div class="panel panel-default panel-pdf-editor">