[17.0][FIX] web_timeline: Enable XSS protection

[etobella]

XSS protection was disabled on this widget. It shouldn't happen.... vis-timeline was complaining about it...

A warning was raised:

You disabled XSS protection for vis-Timeline. I sure hope you know what you\'re doing!

[OCA-git-bot]

Hi @tarteo,
some modules you are maintaining are being modified, check this out!

[pedrobaeza]

It was deactivated in e3e9b5d

It's mentioned that the CSS are not loaded. Is this still happening?

[etobella]

I had the same view when using it and without using it 🤔

I don't know, but warnings were raised for this reason

[pedrobaeza]

Can you please try this modification using project_timeline_hr_timesheet? The problem was <div t-attf-class="o_project_timeline_hr_timesheet_progress"> didn't show that class, and the same for t-attf-class="text-white {{ record.remaining_hours < 0 ? 'bg-danger ' : 'bg-success '}}