html escape simple format

2024-09-07 12:00:12 +03:00
parent 5a1efd0e27
commit bd853c6265
2 changed files with 2 additions and 2 deletions
@@ -154,7 +154,7 @@
              <div class="flex items-center space-x-1 mt-1">
                <span>
                  Reason:
-                  <%= simple_format(submitter.submission_events.find_by(event_type: :decline_form).data['reason']) %>
+                  <%= simple_format(h(submitter.submission_events.find_by(event_type: :decline_form).data['reason'])) %>
                </span>
              </div>
            <% end %>