diff options
author | Gabriel Pérez-Cerezo <gabriel@gpcf.eu> | 2018-07-06 23:21:49 +0200 |
---|---|---|
committer | Gabriel Pérez-Cerezo <gabriel@gpcf.eu> | 2018-07-06 23:21:49 +0200 |
commit | 95679599de538a4833dd873f0630e5819b60db10 (patch) | |
tree | 3375de183cba882702a47ddf0f207589858ffec8 /templates/buglist.html | |
parent | 5fe8f5636768201db4703124aefd1378871c8429 (diff) | |
download | hemiptera-95679599de538a4833dd873f0630e5819b60db10.tar.gz hemiptera-95679599de538a4833dd873f0630e5819b60db10.tar.bz2 hemiptera-95679599de538a4833dd873f0630e5819b60db10.zip |
prevent html injection
Diffstat (limited to 'templates/buglist.html')
-rw-r--r-- | templates/buglist.html | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/templates/buglist.html b/templates/buglist.html index 3e69108..142dc69 100644 --- a/templates/buglist.html +++ b/templates/buglist.html @@ -29,12 +29,12 @@ <td> {{ i.id }} <td> - <a href="/{{ prname }}/{{ i.id }}.html"> {{ i.subject }}</a> + <a href="/{{ prname }}/{{ i.id }}.html"> {{ i.subject|e }}</a> <td> {{ i.replies }} - <td title="{{ i.created }}"> + <td title="{{ i.created|e }}"> {{ i.nicecreated }} - <td title="{{ i.last_reply }}"> + <td title="{{ i.last_reply|e }}"> {{ i.nicereply }} <td> {% if i.closed %} |