[V4 & V5] HTML in page_description block bleed in the template

[lcharette]

Chat discussion : https://chat.userfrosting.com/channel/support?msg=s9XotScA52Wc6r2Ja

When HTML is used in the page_description block, text can appear in the template, but only when double quotes are used:

this works as expected

{% extends 'pages/abstract/dashboard.html.twig' %}

{% block page_title %}Some title{% endblock %}

{% block page_description %}
    Some description with links 
    <a href='https://site1.com' target='_blank'>site1.com</a> и <a href='https://site2.com' target='_blank'>site2.com</a>
{% endblock %}

but this puts some part of href attributes at the left upper corner of the page

{% extends 'pages/abstract/dashboard.html.twig' %}

{% block page_title %}Some title{% endblock %}

{% block page_description %}
    Some description with links 
    <a href="https://site1.com" target="_blank">site1.com</a> and <a href="https://site2.com" target="_blank">site2.com</a>
{% endblock %} 

Cause : HTML is not escapade here:

UserFrosting/app/sprinkles/core/templates/pages/abstract/base.html.twig

Line 12 in adb574f

<meta name="description" content="{% block page_description %}This page has not yet been configured.{% endblock %}">

Fix:

<meta name="description" content="{{ block('page_description')|e }}">