From a7bace7b4799fc33cb202dd898771d607ab38d7b Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?J=C3=A9r=C3=A9my=20Munsch?= <jeremy.munsch@ldc.fr>
Date: Wed, 29 Sep 2021 12:12:21 +0200
Subject: [PATCH] Message message sanitize message, and nl2br only

---
 resources/views/emails/new-ticket.blade.php     | 2 +-
 resources/views/emails/ticket-mention.blade.php | 2 +-
 resources/views/emails/ticket-update.blade.php  | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/resources/views/emails/new-ticket.blade.php b/resources/views/emails/new-ticket.blade.php
index 27b7297..4a9c665 100644
--- a/resources/views/emails/new-ticket.blade.php
+++ b/resources/views/emails/new-ticket.blade.php
@@ -7,6 +7,6 @@
 </ul>
 <p>
     Description :<br>
-    {!! nl2br(e($ticket->text)) !!}
+    {!! clean(nl2br($ticket->text)) !!}
 </p>
 <p>Lien vers le ticket : <a href="{{ route('ticket.show', $ticket->id) }}" traget="_blank">Ouvrir dans un nouvel onglet</a></p>
diff --git a/resources/views/emails/ticket-mention.blade.php b/resources/views/emails/ticket-mention.blade.php
index af5d8af..5727897 100644
--- a/resources/views/emails/ticket-mention.blade.php
+++ b/resources/views/emails/ticket-mention.blade.php
@@ -5,5 +5,5 @@
     <li>Type : {{ $ticket->type === 0 ? "Bug" : "Évolution" }}</li>
     <li>Créé par : {{ $ticket->user->name }}</li>
 </ul>
-<p>{!! $corpsMaj !!}</p>
+<p>{!! clean(nl2br($corpsMaj)) !!}</p>
 <p>Lien vers le ticket : <a href="{{ route('ticket.show', $ticket->id) }}" target="_blank">Ouvrir dans un nouvel onglet</a></p>
diff --git a/resources/views/emails/ticket-update.blade.php b/resources/views/emails/ticket-update.blade.php
index 442eda0..736fd76 100644
--- a/resources/views/emails/ticket-update.blade.php
+++ b/resources/views/emails/ticket-update.blade.php
@@ -5,5 +5,5 @@
     <li>Type : {{ $ticket->type === 0 ? "Bug" : "Évolution" }}</li>
     <li>Créé par : {{ $ticket->user->name }}</li>
 </ul>
-<p>{!! $corpsMaj !!}</p>
+<p>{!! clean(nl2br($corpsMaj)) !!}</p>
 <p>Lien vers le ticket : <a href="{{ route('ticket.show', $ticket->id) }}" target="_blank">Ouvrir dans un nouvel onglet</a></p>