Skip to content

Commit e5c8627

Browse files
Add strict contextual escaping on the $scope for grid controller (#14923)
* Add strict contextual escaping on the $scope for grid controller * use safe_html filter instead
1 parent a2a2680 commit e5c8627

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

src/Umbraco.Cms.StaticAssets/wwwroot/App_Plugins/Umbraco.BlockGridEditor.DefaultCustomViews/umbBlockGridDemoRichTextBlock.html

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -21,5 +21,5 @@
2121

2222
</style>
2323

24-
<div class="text" ng-click="block.edit()" ng-focus="block.focus" ng-bind-html="block.data.richText" style="margin: 0 20px;">
25-
</div>
24+
<div class="text" ng-click="block.edit()" ng-focus="block.focus" ng-bind-html="block.data.richText | safe_html" style="margin: 0 20px;">
25+
</div>

0 commit comments

Comments
 (0)