diff --git a/library/Icinga/Web/Widget/Announcements.php b/library/Icinga/Web/Widget/Announcements.php index 8481a2856..979dd4b56 100644 --- a/library/Icinga/Web/Widget/Announcements.php +++ b/library/Icinga/Web/Widget/Announcements.php @@ -8,6 +8,7 @@ use Icinga\Data\Filter\Filter; use Icinga\Forms\Announcement\AcknowledgeAnnouncementForm; use Icinga\Web\Announcement\AnnouncementCookie; use Icinga\Web\Announcement\AnnouncementIniRepository; +use Icinga\Web\Helper\HtmlPurifier; /** * Render announcements @@ -35,12 +36,13 @@ class Announcements extends AbstractWidget $announcements = $repo->findActive(); $announcements->applyFilter($acked); if ($announcements->hasResult()) { + $purifier = new HtmlPurifier(array('HTML.Allowed' => 'b,a[href|target],i,*[class]')); $html = '