From 0db6e3a5e2c1860938e9c888e6ad8465d7140ce9 Mon Sep 17 00:00:00 2001
From: JediKev <kevin@enhancesoft.com>
Date: Fri, 31 Aug 2018 10:11:09 -0500
Subject: [PATCH] forms: Render Instructions

This addresses issue 4493 where the system renders form instructions as
plain text instead of HTML. The data is saved in the db as encoded HTML and
upon pulling the data we do not decode it back to HTML for rendering.
---
 scp/forms.php | 1 +
 1 file changed, 1 insertion(+)

diff --git a/scp/forms.php b/scp/forms.php
index da5663a81..46bd61931 100644
--- a/scp/forms.php
+++ b/scp/forms.php
@@ -8,6 +8,7 @@ if($_REQUEST['id'] && !($form=DynamicForm::lookup($_REQUEST['id'])))
 
 if($_POST) {
     $_POST = Format::htmlchars($_POST, true);
+    $_POST['instructions'] = Format::htmldecode($_POST['instructions']);
     $fields = array('title', 'notes', 'instructions');
     $required = array('title');
     $max_sort = 0;
-- 
GitLab