Update changelog

CHANGELOG.md

@@ -1,4 +1,5 @@
-[unreleased]: https://github.com/opensourcepos/opensourcepos/compare/3.3.5...HEAD
+[unreleased]: https://github.com/opensourcepos/opensourcepos/compare/3.3.7...HEAD
+[3.3.6]: https://github.com/opensourcepos/opensourcepos/compare/3.3.6...3.3.7
 [3.3.5]: https://github.com/opensourcepos/opensourcepos/compare/3.3.4...3.3.5
 [3.3.4]: https://github.com/opensourcepos/opensourcepos/compare/3.3.3...3.3.4
 [3.3.3]: https://github.com/opensourcepos/opensourcepos/compare/3.3.2...3.3.3
@@ -31,6 +32,13 @@ List of changes in the `master` branch.
 
 - N/A
 
+## [3.3.7] - 2022-04-26
+
+- Translation updates (Thai, Indonesian, Swedish, Italian)
+- XSS fixes in bootstrap datatables
+- Invoice numbering fixes
+- Docker compose database scripts are now mounted from a container volume
+
 ## [3.3.6] - 2022-01-08
 
 - Translation updates (Hungarian, Indonesian, Bosnian, Ukranian, Vietnamese, Spanish)

application/helpers/tabular_helper.php

@@ -42,7 +42,7 @@ function transform_headers($array, $readonly = FALSE, $editable = TRUE)
 		$result[] = array('field' => key($element),
 			'title' => current($element),
 			'switchable' => isset($element['switchable']) ? $element['switchable'] : !preg_match('(^$|&nbsp)', current($element)),
-			'escape' => !preg_match("/(edit|phone_number|email)/", key($element)) && !(isset($element['escape']) && !$element['escape']),
+			'escape' => !preg_match("/(edit|phone_number|email|messages)/", key($element)) && !(isset($element['escape']) && !$element['escape']),
 			'sortable' => isset($element['sortable']) ? $element['sortable'] : current($element) != '',
 			'checkbox' => isset($element['checkbox']) ? $element['checkbox'] : FALSE,
 			'class' => isset($element['checkbox']) || preg_match('(^$|&nbsp)', current($element)) ? 'print_hide' : '',