openstreetmap-website/app/views/user_blocks/revoke.html.erb
Andy Allan 217f616630 Use _html suffix to avoid using raw when displaying translated strings
This is safer than raw, since any user input is still escaped.
2019-12-20 14:32:00 +01:00

33 lines
1,019 B
Text

<% @title = t(".title",
:block_on => h(@user_block.user.display_name),
:block_by => h(@user_block.creator.display_name)) %>
<% content_for :heading do %>
<h1><%= t(".heading_html",
:block_on => link_to(@user_block.user.display_name,
user_path(@user_block.user)),
:block_by => link_to(@user_block.creator.display_name,
user_path(@user_block.creator))) %></h1>
<% end %>
<% if @user_block.ends_at > Time.now %>
<p><b>
<%= t(".time_future", :time => distance_of_time_in_words_to_now(@user_block.ends_at)) %>
</b></p>
<%= form_for :revoke, :url => { :action => "revoke" } do |f| %>
<%= f.error_messages %>
<p>
<%= check_box_tag "confirm", "yes" %>
<%= label_tag "confirm", t(".confirm") %>
</p>
<p>
<%= submit_tag t(".revoke") %>
</p>
<% end %>
<% else %>
<p>
<%= t(".past", :time => time_ago_in_words(@user_block.ends_at, :scope => :'datetime.distance_in_words_ago')) %>
</p>
<% end %>