The `spaceless` filter implicitly marks its output as safe

More info at https://symfony.com/cve-2026-46628...