From 6fdb077ca51407162109c9ed0d97882d7c7138eb Mon Sep 17 00:00:00 2001
From: Antoine Nguyen <tonio@ngyn.org>
Date: Tue, 17 Oct 2023 15:25:45 +0200
Subject: [PATCH] Fixed XSS vulnerability when displaying form error messages.

---
 modoboa/templates/common/generic_field.html | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/modoboa/templates/common/generic_field.html b/modoboa/templates/common/generic_field.html
index 95a03f5cb..116071a8f 100644
--- a/modoboa/templates/common/generic_field.html
+++ b/modoboa/templates/common/generic_field.html
@@ -12,7 +12,7 @@
     {% endif %}
   </label>
   {% endif %}
-  
+
   <div class="{% render_field_width field %}">
     {% if appended_text %}
     <div class="input-group">
@@ -31,7 +31,7 @@
     {% if field.errors %}
     <p class="help-block">
       {% for error in field.errors %}
-      {{ error|safe }}
+      {{ error }}
       {% endfor %}
     </p>
     {% endif %}