mdebray/tvl-depot
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix(templates): Mark pre-escaped variables as 'safe'

Browse source
This commit is contained in:
Vincent Ambo 2018-04-16 00:25:29 +02:00
parent fc0b9d7fa5
commit 72f6fa65fd
2 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
templates/search.html
View file

@ -34,7 +34,7 @@
{% for result in results -%}
<a href="/thread/{{ result.thread_id }}#post-{{ result.post_id }}" class="list-group-item list-group-item-action flex-column align-items-start">
<div class="d-flex w-100 justify-content-between">
<p class="mb-1">{{ result.headline }}</p>
<p class="mb-1">{{ result.headline | safe }}</p>
<small class="float-right text-muted"><i>(Posted in '{{ result.title }}' by {{ result.author }})</i></small>
</div>
</a>

2
templates/thread.html
View file

@ -33,7 +33,7 @@
<strong>{{ post.author_name }}</strong>
</div>
<div class="align-self-stretch">{{ post.body }}</div>
<div class="align-self-stretch">{{ post.body | safe }}</div>
<div class="d-inline-flex flex-column align-items-end ml-auto">
<a href="/thread/{{ id }}#post-{{ post.id }}" class="ml-auto">