diff --git a/app/views/reports/report.pdf.erb b/app/views/reports/report.pdf.erb index 6e96f962d..1fd6dcbe2 100644 --- a/app/views/reports/report.pdf.erb +++ b/app/views/reports/report.pdf.erb @@ -10,7 +10,9 @@
<% # Also whitelist and tags %> - <%= @html.html_safe %> + <%= sanitize_input(fix_smart_annotation_image(@html), + %w(img input), + %w(type disabled checked)) %>