diff options
| author | f0x52 <0x52@waifu.club> | 2017-04-17 22:30:14 +0200 |
|---|---|---|
| committer | f0x52 <0x52@waifu.club> | 2017-04-17 22:30:14 +0200 |
| commit | e3b3e1601c8ce1a8178fec43de89b707d0e66b62 (patch) | |
| tree | 263fffd4409aba36925b1d2bcf3b75da05f3cd01 | |
| parent | 641b694d59648b607e8ab8ef44a91094b99202b9 (diff) | |
escaping on all fields
| -rw-r--r-- | templates/mod/edit_post_form.html | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/templates/mod/edit_post_form.html b/templates/mod/edit_post_form.html index 0261ba69..a22f36f3 100644 --- a/templates/mod/edit_post_form.html +++ b/templates/mod/edit_post_form.html @@ -7,7 +7,7 @@ {% trans %}Name{% endtrans %} </th> <td> - <input type="text" name="name" size="25" maxlength="35" autocomplete="off" value="{{ post.name }}"> + <input type="text" name="name" size="25" maxlength="35" autocomplete="off" value="{{ post.name|e }}"> </td> </tr> <tr> @@ -15,7 +15,7 @@ {% trans %}Email{% endtrans %} </th> <td> - <input type="text" name="email" size="25" maxlength="40" autocomplete="off" value="{{ post.email }}"> + <input type="text" name="email" size="25" maxlength="40" autocomplete="off" value="{{ post.email|e }}"> </td> </tr> <tr> @@ -32,7 +32,7 @@ {% trans %}Comment{% endtrans %} </th> <td> - <textarea name="body" id="body" rows="8" cols="35">{% if raw %}{{ post.body }}{% else %}{{ post.body_nomarkup }}{% endif %}</textarea> + <textarea name="body" id="body" rows="8" cols="35">{% if raw %}{{ post.body|e }}{% else %}{{ post.body_nomarkup|e }}{% endif %}</textarea> </td> </tr> </table> |