From 269d6156ef9cd86344e5c1d2eae08db1af22aeac Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Cl=C3=A9ment=20OUDOT?= <clement.oudot@worteks.com>
Date: Fri, 19 Jan 2024 10:15:50 +0100
Subject: [PATCH] Fix HTML escaping in dn_link

---
 templates/value_displayer.tpl | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/templates/value_displayer.tpl b/templates/value_displayer.tpl
index 733a27c..85e4136 100644
--- a/templates/value_displayer.tpl
+++ b/templates/value_displayer.tpl
@@ -13,21 +13,21 @@
 {if $type eq 'dn_link'}
     {assign var="link" value="{{get_attribute dn="{$value}" attribute="{$dn_link_label_attributes}" ldap_url="{$ldap_params.ldap_url}" ldap_starttls="{$ldap_params.ldap_starttls}" ldap_binddn="{$ldap_params.ldap_binddn}" ldap_bindpw="{$ldap_params.ldap_bindpw}" ldap_filter="{$ldap_params.ldap_user_filter}" ldap_network_timeout="{$ldap_params.ldap_network_timeout}"}|truncate:{$truncate_value_after}}"}
     {if $link}
-    <a href="index.php?page=display&dn={$value|escape:'url'}&search={$search}">{$link}</a><br />
+    <a href="index.php?page=display&dn={$value|escape:'url'}&search={$search}">{$link|unescape:'html'}</a><br />
     {/if}
 {/if}
 
 {if $type eq 'group_dn_link'}
     {assign var="link" value="{{get_attribute dn="{$value}" attribute="{$group_dn_link_label_attributes}" ldap_url="{$ldap_params.ldap_url}" ldap_starttls="{$ldap_params.ldap_starttls}" ldap_binddn="{$ldap_params.ldap_binddn}" ldap_bindpw="{$ldap_params.ldap_bindpw}" ldap_filter="{$ldap_params.ldap_group_filter}" ldap_network_timeout="{$ldap_params.ldap_network_timeout}"}|truncate:{$truncate_value_after}}"}
     {if $link}
-    <a href="index.php?page=display&dn={$value|escape:'url'}&search={$search}">{$link}</a><br />
+    <a href="index.php?page=display&dn={$value|escape:'url'}&search={$search}">{$link|unescape:'html'}</a><br />
     {/if}
 {/if}
 
 {if $type eq 'usergroup_dn_link'}
     {assign var="link" value="{{get_attribute dn="{$value}" attribute="{$usergroup_dn_link_label_attributes}" ldap_url="{$ldap_params.ldap_url}" ldap_starttls="{$ldap_params.ldap_starttls}" ldap_binddn="{$ldap_params.ldap_binddn}" ldap_bindpw="{$ldap_params.ldap_bindpw}" ldap_filter="(|{$ldap_params.ldap_group_filter}{$ldap_params.ldap_user_filter})" ldap_network_timeout="{$ldap_params.ldap_network_timeout}"}|truncate:{$truncate_value_after}}"}
     {if $link}
-    <a href="index.php?page=display&dn={$value|escape:'url'}&search={$search}">{$link}</a><br />
+    <a href="index.php?page=display&dn={$value|escape:'url'}&search={$search}">{$link|unescape:'html'}</a><br />
     {/if}
 {/if}