Skip to content

Commit 0c147a9

Browse files
committed
Escape some additional html templates
1 parent 92286a6 commit 0c147a9

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

templates/logbase.html

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -115,7 +115,7 @@
115115
{% if attachment.is_image %}
116116
<img class="chatlog__attachment-thumbnail" src="{{ attachment.url }}" alt="attachment"/>
117117
{% else %}
118-
Attachment: {{ attachment.filename }}
118+
Attachment: {{ attachment.filename | e }}
119119
{% endif %}
120120
</a>
121121
</div>
@@ -132,12 +132,12 @@
132132
</div>
133133
<div class="chatlog__messages">
134134
<span class="chatlog__author-name"
135-
title="{{ log_entry.closer | string | e }}">{{ log_entry.closer.name }}</span>
135+
title="{{ log_entry.closer | string | e }}">{{ log_entry.closer.name | e }}</span>
136136
{% if log_entry.closer.mod %}
137137
<span>closed the thread</span>
138138
<span class="system-tag">System</span>
139139
{% endif %}
140-
<span class="chatlog__timestamp">{{ log_entry.human_closed_at }}</span>
140+
<span class="chatlog__timestamp">{{ log_entry.human_closed_at | e }}</span>
141141
{% if log_entry.close_message %}
142142
<div class="chatlog__content">
143143
{{ log_entry.close_message }}

0 commit comments

Comments
 (0)