From 9416a19d853365014d86b389d7f7c5331ddde2b9 Mon Sep 17 00:00:00 2001
From: Julie Lenaerts <julielenaerts@gmail.com>
Date: Mon, 21 Oct 2024 15:39:05 +0200
Subject: [PATCH] Sanitize html for good measure

---
 .../ChillMainBundle/Templating/Entity/ChillGenderIconRender.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/Bundle/ChillMainBundle/Templating/Entity/ChillGenderIconRender.php b/src/Bundle/ChillMainBundle/Templating/Entity/ChillGenderIconRender.php
index 68cfdc8ec..383234bd3 100644
--- a/src/Bundle/ChillMainBundle/Templating/Entity/ChillGenderIconRender.php
+++ b/src/Bundle/ChillMainBundle/Templating/Entity/ChillGenderIconRender.php
@@ -20,7 +20,7 @@ final readonly class ChillGenderIconRender implements ChillEntityRenderInterface
 {
     public function renderBox($icon, array $options): string
     {
-        return '<i class="'.$icon->value.'"></i>';
+        return '<i class="'.htmlspecialchars($icon->value, ENT_QUOTES, 'UTF-8').'"></i>';
     }
 
     public function renderString($icon, array $options): string