diff --git a/typo3/sysext/backend/Resources/Private/Partials/LoginNews.html b/typo3/sysext/backend/Resources/Private/Partials/LoginNews.html index 5a4f6bd34ca5391781d8c76bf92f4a0b465803e2..e9022f424d91891dd9ef61c18afd67b41c186eee 100644 --- a/typo3/sysext/backend/Resources/Private/Partials/LoginNews.html +++ b/typo3/sysext/backend/Resources/Private/Partials/LoginNews.html @@ -36,7 +36,7 @@ <f:section name="Item"> <p id="loginNewsItem-{item.uid}" class="typo3-login-news-heading">{item.header}</p> - <f:format.html>{item.content}</f:format.html> + {item.content -> f:transform.html() -> f:sanitize.html()} <f:if condition="{item.date}"><p class="text-muted"><span class="sr-only"><f:translate key="login.news.date"/></span>{item.date}</p></f:if> </f:section> </html> diff --git a/typo3/sysext/reports/Resources/Private/Templates/Report/Detail.html b/typo3/sysext/reports/Resources/Private/Templates/Report/Detail.html index 17c9f5238046e266b43dae7aec1b0fc9e6c48a84..f944ea4f10e39f31209829bedba38cc5a6802890 100644 --- a/typo3/sysext/reports/Resources/Private/Templates/Report/Detail.html +++ b/typo3/sysext/reports/Resources/Private/Templates/Report/Detail.html @@ -8,7 +8,7 @@ {error} </f:then> <f:else> - <f:format.html parseFuncTSPath="">{content -> f:format.raw()}</f:format.html> + {content -> f:transform.html() -> f:sanitize.html()} </f:else> </f:if> </f:section>