Fixed issue #19593: List with comment double encoding comment

SondagesPro · Jun 26, 2024 · a154c5c · a154c5c
1 parent 4dbd746
commit a154c5c
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/application/core/QuestionTypes/ListWithComment/RenderListComment.php b/application/core/QuestionTypes/ListWithComment/RenderListComment.php
@@ -79,7 +79,7 @@ public function renderList($sCoreClasses)
             'name'              => $this->sSGQA . 'comment',
             'tarows'            => floor($tarows),
             'has_comment_saved' => isset($_SESSION['survey_' . Yii::app()->getConfig('surveyID')][$fname2]) && $_SESSION['survey_' . Yii::app()->getConfig('surveyID')][$fname2],
-            'comment_saved'     => htmlspecialchars($_SESSION['survey_' . Yii::app()->getConfig('surveyID')][$fname2]),
+            'comment_saved'     => $_SESSION['survey_' . Yii::app()->getConfig('surveyID')][$fname2],
             'java_name'         => 'java' . $this->sSGQA,
             'java_id'           => 'java' . $this->sSGQA,
             'java_value'        => $this->mSessionValue
@@ -144,7 +144,7 @@ public function renderDropdown($sCoreClasses)
             'label_text'             => gT('Please enter your comment here'),
             'tarows'                 => $tarows,
             'maxoptionsize'          => $this->maxoptionsize,
-            'comment_saved'          => htmlspecialchars($_SESSION['survey_' . Yii::app()->getConfig('surveyID')][$fname2]),
+            'comment_saved'          => $_SESSION['survey_' . Yii::app()->getConfig('surveyID')][$fname2],
             'value'                  => $this->mSessionValue,
             ), true);
 

diff --git a/application/views/survey/questions/answer/list_with_comment/dropdown/answer.twig b/application/views/survey/questions/answer/list_with_comment/dropdown/answer.twig
@@ -51,7 +51,7 @@
             id="answer{{ name  }}comment"
             rows="{{ tarows }}"
             cols="{{ maxoptionsize }}"
-        >{{ comment_saved }}</textarea>
+        >{{ comment_saved|escape }}</textarea>
 
     </div>
 </div>