Steps to reproduce:
- Install `website_event_crm` module
- Go to events and create a new event
- Add a question of type `text input`
- Publish the event and go to it on the website
- Register to the event with an email containing `@example.com` and
answer the question.
- Go to CRM in backend and open the new lead created.
Issue:
Html tags are not escaped in the lead description.
Same issue with `text_box` type question when having html in answer.
Cause:
The override of `_get_lead_description_registration` is returning
a string that escape also the `</br>` tags + the `text_box` answer
is not escaped.
Solution:
Use Markup around strings that contain the `</br>` tags to be not
escaped + escape `text_box` answers.
opw-3471097
closesodoo/odoo#146937
X-original-commit: 27faa1f9b28d01e13277d8d16d7dfbbab8701b01
Signed-off-by: Thibault Delavallee (tde) <tde@openerp.com>
Nasreddin Boulif (bon)
5b71700434