From 1a60c5ea64d353f4b7f158d72c5b0c2fcf73c9df Mon Sep 17 00:00:00 2001 From: Raphael Michel Date: Mon, 16 Mar 2020 11:44:31 +0100 Subject: [PATCH] Fix missing bleach call in invoice renderer --- src/pretix/base/invoice.py | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/src/pretix/base/invoice.py b/src/pretix/base/invoice.py index 8306f92ea1..c513c9cca0 100644 --- a/src/pretix/base/invoice.py +++ b/src/pretix/base/invoice.py @@ -264,7 +264,8 @@ class ClassicInvoiceRenderer(BaseReportlabInvoiceRenderer): invoice_to_top = 52 * mm def _draw_invoice_to(self, canvas): - p = Paragraph(self.invoice.address_invoice_to.strip().replace('\n', '
\n'), style=self.stylesheet['Normal']) + p = Paragraph(bleach.clean(self.invoice.address_invoice_to, tags=[]).strip().replace('\n', '
\n'), + style=self.stylesheet['Normal']) p.wrapOn(canvas, self.invoice_to_width, self.invoice_to_height) p_size = p.wrap(self.invoice_to_width, self.invoice_to_height) p.drawOn(canvas, self.invoice_to_left, self.pagesize[1] - p_size[1] - self.invoice_to_top)