use purifyHtml() as in the Text block, fixes #3176

Closes #3176

Merge request studip/studip!2153

2 files changed, 30 insertions, 0 deletions

diff --git a/lib/models/Courseware/BlockTypes/BiographyAchievements.php b/lib/models/Courseware/BlockTypes/BiographyAchievements.php
index e002950..3af5d64 100644
--- a/lib/models/Courseware/BlockTypes/BiographyAchievements.php
+++ b/lib/models/Courseware/BlockTypes/BiographyAchievements.php
@@ -42,6 +42,21 @@ class BiographyAchievements extends BlockType
         ];
     }
 
+    public function getPayload()
+    {
+        $payload = parent::getPayload();
+        $payload['description'] = \Studip\Markup::purifyHtml(\Studip\Markup::markAsHtml($payload['description']));
+
+        return $payload;
+    }
+
+    public function setPayload($payload): void
+    {
+        $payload['description'] = \Studip\Markup::purifyHtml(\Studip\Markup::markAsHtml($payload['description']));
+
+        parent::setPayload($payload);
+    }
+
     public static function getJsonSchema(): Schema
     {
         $schemaFile = __DIR__.'/BiographyAchievements.json';
diff --git a/lib/models/Courseware/BlockTypes/BiographyGoals.php b/lib/models/Courseware/BlockTypes/BiographyGoals.php
index 0cf67f1..dcfb76c 100644
--- a/lib/models/Courseware/BlockTypes/BiographyGoals.php
+++ b/lib/models/Courseware/BlockTypes/BiographyGoals.php
@@ -38,6 +38,21 @@ class BiographyGoals extends BlockType
         ];
     }
 
+    public function getPayload()
+    {
+        $payload = parent::getPayload();
+        $payload['description'] = \Studip\Markup::purifyHtml(\Studip\Markup::markAsHtml($payload['description']));
+
+        return $payload;
+    }
+
+    public function setPayload($payload): void
+    {
+        $payload['description'] = \Studip\Markup::purifyHtml(\Studip\Markup::markAsHtml($payload['description']));
+
+        parent::setPayload($payload);
+    }
+
     public static function getJsonSchema(): Schema
     {
         $schemaFile = __DIR__.'/BiographyGoals.json';