Sanitize survey frontend and PDF output

contao/templates/frontend/member_survey_list.html.twig

@@ -1,7 +1,7 @@
 {% include '@Survey/frontend/_survey_assets.html.twig' %}
 {% include '@Survey/frontend/_survey_branding.html.twig' %}
 
-{% set moduleHeadline = headline is iterable ? headline.text|default('') : headline|default('') %}
+{% set moduleHeadline = (headline is iterable ? headline.text|default('') : headline|default(''))|striptags|trim %}
 
 <section class="survey-shell survey-grid">
     {% if moduleHeadline %}
@@ -23,13 +23,13 @@
             {% for survey in surveys %}
                 <article class="survey-card">
                     <div class="survey-meta">
-                        <h3>{{ survey.title }}</h3>
+                        <h3>{{ survey.title|striptags|trim }}</h3>
                         <span class="survey-badge {{ survey.published ? 'success' : 'neutral' }}">{{ survey.published ? 'veroeffentlicht' : 'Entwurf' }}</span>
                         {% if survey.isLocked %}
                             <span class="survey-badge warning">gesperrt</span>
                         {% endif %}
                     </div>
-                    <p>{{ survey.description ?: 'Keine Beschreibung hinterlegt.' }}</p>
+                    <p>{{ (survey.description|striptags|trim) ?: 'Keine Beschreibung hinterlegt.' }}</p>
                     <div class="survey-meta">
                         <span class="survey-badge neutral">{{ survey.questionCount }} Fragen</span>
                         <span class="survey-badge neutral">{{ survey.answerCount }} Antworten</span>