Make educations columns html safe after sanitizing qualification kind

label
hitobito · Oct 27, 2023 · 15dfd9c · 15dfd9c
1 parent b52e718
commit 15dfd9c
Showing 1 changed file with 5 additions and 3 deletions.
diff --git a/app/helpers/group_educations_helper.rb b/app/helpers/group_educations_helper.rb
@@ -14,10 +14,11 @@ def joined_qualification_kind_labels(person)
       reverse.
       uniq(&:qualification_kind).
       collect do |q|
-        label = "#{q.qualification_kind.label} #{format_attr(q, :finish_at)}".strip
+        label = "#{h(q.qualification_kind.label)} #{format_attr(q, :finish_at)}".strip
         content_tag(:span, label, class: qualification_label_class(q))
       end.
-      join('<br/>')
+      join('<br/>').
+      html_safe
   end
 
   def joined_event_participations(person)
@@ -30,7 +31,8 @@ def joined_event_participations(person)
       collect do |p|
         format_open_participation_event(p)
       end.
-      join(', ')
+      join(', ').
+      html_safe
   end
 
   def format_open_participation_event(participation)