Merge pull request #94 from merchantos/LSR-25320-xss-in-vendor-packin…

…g-slip LSR-25320 Prevent XSS in vendor return packing slip notes
merchantos · Sep 27, 2023 · 93b59f5 · 93b59f5
2 parents c2971fc + cbd3f50
commit 93b59f5
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/vendor_return/VendorReturnPackingSlip.tpl b/vendor_return/VendorReturnPackingSlip.tpl
@@ -257,7 +257,7 @@ html { height: 100% }
 
 {% if VendorReturn.Note.note|strlen > 0 %}
 <h3>Notes</h3>
-<p class="s">{{ VendorReturn.Note.note|nl2br|raw }}</p>
+<p class="s">{{ VendorReturn.Note.note|noteformat|raw }}</p>
 {% endif %}
 
 {% endfor %}