altf4arnold/datatracker
1
0
Fork 0
Code Issues Pull requests Actions 3 Packages Projects Releases Wiki Activity

fix: escape the ballot comments (#3952)

Browse source 
I wonder if other fields that have class `pasted` would need to be escaped, too?
This commit is contained in:
Lars Eggert 2022-05-12 20:17:48 +03:00 committed by GitHub
parent cb996c5c0b
commit 39525a1cd0
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 4 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
ietf/templates/doc/document_ballot_content.html
View file

@ -122,7 +122,7 @@
</div>
</div>
<div class="card-body">
<pre class="ballot pasted">{{ p.discuss|urlize_ietf_docs|linkify }}</pre>
<pre class="ballot pasted">{{ p.discuss|escape|urlize_ietf_docs|linkify }}</pre>
</div>
</div>
{% endif %}
@ -148,7 +148,7 @@
</div>
</div>
<div class="card-body">
<pre class="ballot pasted">{{ p.comment|urlize_ietf_docs|linkify }}</pre>
<pre class="ballot pasted">{{ p.comment|escape|urlize_ietf_docs|linkify }}</pre>
</div>
</div>
{% endif %}
@ -199,11 +199,11 @@
</div>
{% if p.pos.blocking and p.discuss %}
<div class="card-body">
<pre class="ballot pasted">{{ p.discuss|urlize_ietf_docs|linkify }}</pre>
<pre class="ballot pasted">{{ p.discuss|escape|urlize_ietf_docs|linkify }}</pre>
</div>
{% else %}
<div class="card-body">
<pre class="ballot pasted">{{ p.comment|urlize_ietf_docs|linkify }}</pre>
<pre class="ballot pasted">{{ p.comment|escape|urlize_ietf_docs|linkify }}</pre>
</div>
{% endif %}
</div>