Fix XSS when using setFormatValue($callable)#6255

Open

allan-simon wants to merge 2 commits intoEasyCorp:4.xfrom allan-simon:4.x

+18-17

Commits on Apr 11, 2024

Fix a XSS when using a custom format callable, it was silently bypassing twig default escape by wrapping the string in a "Markup" object that is whitelisted
allan-simon
committed
Fix a XSS when using a custom format callable, it was silently bypassing twig default escape by wrapping the string in a "Markup" object that is whitelisted
allan-simon
committed