From d44691c6138ea527422a7b5d8942736a118f1e6e Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Benjamin=20Beganovi=C4=87?= <k1pstabug@gmail.com>
Date: Fri, 9 Apr 2021 13:11:28 +0200
Subject: [PATCH] wip

---
 app/Services/PdfMaker/PdfMakerUtilities.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/app/Services/PdfMaker/PdfMakerUtilities.php b/app/Services/PdfMaker/PdfMakerUtilities.php
index d8631d48e302..d98f3577a5e0 100644
--- a/app/Services/PdfMaker/PdfMakerUtilities.php
+++ b/app/Services/PdfMaker/PdfMakerUtilities.php
@@ -137,7 +137,7 @@ trait PdfMakerUtilities
 
                 $_child = $this->document->createElement($child['element'], '');
                 $_child->setAttribute('data-state', 'encoded-html');
-                $_child->nodeValue = $child['content'];
+                $_child->nodeValue = htmlspecialchars($child['content']);
             } else {
                 // .. in case string doesn't contain any HTML, we'll just return
                 // raw $content.