Skip to content

Don't escape messages twice

Catrope requested to merge double-escaping into main

They're escaped once by ->escaped(), and then escaped again by Mustache ({{double braces}} do HTML escaping, {{{triple braces}}} don't). Change ->escaped() to ->text() so that only the Mustache escaping remains.

Thanks to Niklas Laxström for reporting this.

Merge request reports