fix XSS issues with date formatting, fixes #6277

Closes #6277

Merge request studip/studip!4751

1 files changed, 1 insertions, 1 deletions

diff --git a/app/controllers/course/overview.php b/app/controllers/course/overview.php
index 4313cdc..f1aa52d 100644
--- a/app/controllers/course/overview.php
+++ b/app/controllers/course/overview.php
@@ -67,7 +67,7 @@ class Course_OverviewController extends AuthenticatedController
             $this->next_date   = $this->course->getNextDate();
             $this->first_date  = $this->course->getFirstDate();
             $show_link         = $GLOBALS["perm"]->have_studip_perm('autor', $this->course_id) && $this->course->isToolActive('schedule');
-            $this->times_rooms = implode('<br>', $this->course->getAllDatesInSemester()->toStringArray());
+            $this->times_rooms = $this->course->getAllDatesInSemester()->toHtml();
 
             //Load lecturers:
             $lecturers = $this->course->getMembersWithStatus('dozent');