diff options
| author | Michael Foster <savetheinternet@tinyboard.org> | 2013-07-31 21:24:17 -0400 |
|---|---|---|
| committer | Michael Foster <savetheinternet@tinyboard.org> | 2013-07-31 21:24:17 -0400 |
| commit | ea2b8cce077a092e0cbf136f9a45158668cc5ecf (patch) | |
| tree | 13a8ecffd00d47ec68e57cda190fb7342fb1ac58 /templates/mod/edit_post_form.html | |
| parent | a5312ebe897036e89db57480abb0ae617a2bcb38 (diff) | |
Bugfix: HTML injection in post editing (introduces and fixes yet another bug)
Diffstat (limited to 'templates/mod/edit_post_form.html')
| -rw-r--r-- | templates/mod/edit_post_form.html | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/templates/mod/edit_post_form.html b/templates/mod/edit_post_form.html index 146e725b..b9359c68 100644 --- a/templates/mod/edit_post_form.html +++ b/templates/mod/edit_post_form.html @@ -32,7 +32,7 @@ {% trans %}Comment{% endtrans %} </th> <td> - <textarea name="body" id="body" rows="8" cols="35">{% if raw %}{{ post.body | e }}{% else %}{{ post.body_nomarkup }}{% endif %}</textarea> + <textarea name="body" id="body" rows="8" cols="35">{% if raw %}{{ post.body|e }}{% else %}{{ post.body_nomarkup|e }}{% endif %}</textarea> </td> </tr> </table> |