Don't html-escape ticket title, it's already escaped

src/Vervis/Widget/Ticket.hs

@@ -27,6 +27,7 @@ import Data.HashMap.Lazy (HashMap)
 import Data.Maybe (mapMaybe)
 import Data.Text (Text)
 import Data.Time.Clock (UTCTime)
+import Text.Blaze.Html (preEscapedToHtml)
 import Yesod.Core (MonadHandler, newIdent)
 import Yesod.Core.Handler (getCurrentRoute, getRequest, YesodRequest (..))
 import Yesod.Core.Widget (whamlet)

templates/ticket/one.hamlet

@@ -12,7 +12,7 @@ $# You should have received a copy of the CC0 Public Domain Dedication along
 $# with this software. If not, see
 $# <http://creativecommons.org/publicdomain/zero/1.0/>.
 
-<h2>#{ticketTitle ticket}
+<h2>#{preEscapedToHtml $ ticketTitle ticket}
 
 <div>
   Created on #{showDate $ ticketCreated ticket} by

templates/ticket/widget/summary.hamlet

@@ -36,7 +36,7 @@ $# <http://creativecommons.org/publicdomain/zero/1.0/>.
 
 <span .ticket-title-column>
   <a href=@{TicketR shr prj $ tsNumber ts}>
-    #{tsTitle ts}
+    #{preEscapedToHtml $ tsTitle ts}
   $forall wf <- tsLabels ts
     $maybe wfcol <- workflowFieldColor wf
       <span .label#{wfcol}>