SAK-50328 Reset Pass do not escape instructions (sakaiproject#12757)

botimer · Jul 26, 2024 · d5b2d2e · d5b2d2e
1 parent 7824d36
commit d5b2d2e
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/reset-pass/reset-pass/src/main/webapp/WEB-INF/templates/form.html b/reset-pass/reset-pass/src/main/webapp/WEB-INF/templates/form.html
@@ -10,7 +10,7 @@ <h1 th:text="#{mainTitle}">Reset your password</h1>
         <div class="sak-banner-info d-none" id="email-sent-msg"></div>
 
         <div th:if="${placement != null}" id="instructions">
-            <p class="sak-banner-info" th:if="${placement.getConfig().getProperty('instructions') != ''}" th:text="${placement.getConfig().getProperty('instructions')}">Instructions from tool properties</p>
+            <p class="sak-banner-info" th:if="${placement.getConfig().getProperty('instructions') != ''}" th:utext="${placement.getConfig().getProperty('instructions')}">Instructions from tool properties</p>
         </div>
         <div th:unless="${placement != null}" id="instructions">
             <p class="sak-banner-info" th:text="#{mainText(${uiService})}">This password service is only available for guest users on {0}.</p>