Fix html encoding issue
<%
if (description != null && description.trim().length() > 0) {
%>
- <td><textarea name="description" id="description" class="text-box-big"><%=description%>
+ <td><textarea name="description" id="description" class="text-box-big">
+ <%=Encode.forHtmlContent(description)%>
</textarea>
</td>
<%
%>
</td>
<td class="sectionHelp" width="50%" style="text-align:left; !important">
- <%=description%>
+ <%=Encode.forHtmlContent(description)%>
</td>
</tr>
