[17.0][FIX] web_timeline: Enable XSS protection

[etobella]

XSS protection was disabled on this widget. It shouldn't happen.... vis-timeline was complaining about it...

A warning was raised:

You disabled XSS protection for vis-Timeline. I sure hope you know what you\'re doing!

[OCA-git-bot]

Hi @tarteo, some modules you are maintaining are being modified, check this out!

[etobella]

I had the same view when using it and without using it :thinking:

I don't know, but warnings were raised for this reason

[pedrobaeza]

Can you please try this modification using project_timeline_hr_timesheet? The problem was <div t-attf-class="o_project_timeline_hr_timesheet_progress"> didn't show that class, and the same for t-attf-class="text-white {{ record.remaining_hours < 0 ? 'bg-danger ' : 'bg-success '}}

[carlos-lopez-tecnativa]

@etobella please see this PR https://github.com/OCA/web/pull/3169

[etobella]

Thanks @carlos-lopez-tecnativa Obviously your is more clean than my solution