Merge branch 'fix/xss' into 'develop'

xss fixes

See merge request rc3/hub!221

src/plainui/jinja2/plainui/components/list_assemblies.html

@@ -72,13 +72,13 @@
         <a
             href="{{ link }}"
             class="text-decoration-none text-white"
-            title="{{ assembly.name | safe }}"
+            title="{{ assembly.name }}"
         >
             <figure class="mb-2">
                 {% if assembly.banner_image %}
-                    <img class="w-100 d-block" src="{{ assembly.banner_image.url }}" alt="{{ assembly.name | safe }}" title="{{ assembly.name | safe}}" />
+                    <img class="w-100 d-block" src="{{ assembly.banner_image.url }}" alt="{{ assembly.name }}" title="{{ assembly.name }}" />
                 {% else %}
-                    <img class="w-100 d-block" src="/static/plainui/img/rc3-logo-assembly.svg" alt="{{ assembly.name | safe }}" title="{{ assembly.name | safe }}" />
+                    <img class="w-100 d-block" src="/static/plainui/img/rc3-logo-assembly.svg" alt="{{ assembly.name }}" title="{{ assembly.name }}" />
                 {% endif %}
             </figure>
             <section class="m-2">

src/plainui/jinja2/plainui/components/list_rooms.html

@@ -25,8 +25,8 @@
         <span class="btn-icon-big text-white" title="{{ _("roomtype") ~ ': ' ~ _(room.room_type) }}">
             {{ icon(room.room_type) }}
         </span>
-        <a href="{{ link }}" title="{{ room.name | safe }}" class="text-white mr-auto">
-            {{ room.name | safe }}
+        <a href="{{ link }}" title="{{ room.name }}" class="text-white mr-auto">
+            {{ room.name }}
         </a>
         {% if room.capacity and room.capacity != None and room.capacity > 0 %}
             <span class="btn-icon-big text-white">{{ icon("capacity") }}</span>