System Admin: fix the sanitization rules for application form fields …

…to allow HTML
GibbonEdu · Aug 19, 2024 · 3ac1553 · 3ac1553
1 parent a7d43d3
commit 3ac1553
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 1 deletion.
diff --git a/CHANGELOG.txt b/CHANGELOG.txt
@@ -46,6 +46,7 @@ v28.0.00
         Finance: fixed bulk exporting invoice fees for Pending invoices
         Form Groups: fixed Year Group Summary list when looking at non-current school years
         Timetable: fixed permission checking before displaying user status info in View Timetables list
+        System Admin: fixed the sanitization rules for application form fields to allow HTML
 
 v27.0.01
 --------

diff --git a/modules/System Admin/formBuilder_page_edit_field_editProcess.php b/modules/System Admin/formBuilder_page_edit_field_editProcess.php
@@ -24,7 +24,7 @@
 
 require_once '../../gibbon.php';
 
-$_POST = $container->get(Validator::class)->sanitize($_POST);
+$_POST = $container->get(Validator::class)->sanitize($_POST, ['label' => 'HTML', 'description' => 'HTML', 'options' => 'RAW']);
 
 $urlParams = [
     'gibbonFormID'      => $_REQUEST['gibbonFormID'] ?? '',