diff options
| author | czaks <marcin@6irc.net> | 2016-05-06 16:53:28 +0200 |
|---|---|---|
| committer | czaks <marcin@6irc.net> | 2016-05-06 16:53:28 +0200 |
| commit | 3f405b3484ae6b621ca1fdacbf20e1ef9f3b553a (patch) | |
| tree | 45fe6cf52289c0d96734ce4791227ca47bdd6855 /templates | |
| parent | 3571670b98b2e6293e429f3e629510ab9f38e70a (diff) | |
what if IP address contained bad characters? (highly local)
Diffstat (limited to 'templates')
| -rw-r--r-- | templates/mod/ban_form.html | 2 | ||||
| -rw-r--r-- | templates/mod/view_ip.html | 2 |
2 files changed, 2 insertions, 2 deletions
diff --git a/templates/mod/ban_form.html b/templates/mod/ban_form.html index 6c7560ad..98cc34b2 100644 --- a/templates/mod/ban_form.html +++ b/templates/mod/ban_form.html @@ -21,7 +21,7 @@ </th> <td> {% if not hide_ip %} - <input type="text" name="ip" id="ip" size="30" maxlength="40" value="{{ ip }}"> + <input type="text" name="ip" id="ip" size="30" maxlength="40" value="{{ ip|e }}"> {% else %} <em>{% trans 'hidden' %}</em> {% endif %} diff --git a/templates/mod/view_ip.html b/templates/mod/view_ip.html index 1c1c7fa6..4bacc7f6 100644 --- a/templates/mod/view_ip.html +++ b/templates/mod/view_ip.html @@ -45,7 +45,7 @@ </td> {% if mod|hasPermission(config.mod.remove_notes) %} <td class="minimal"> - <a href="?/IP/{{ ip }}/remove_note/{{ note.id }}"> + <a href="?/IP/{{ ip|url_encode(true) }}/remove_note/{{ note.id }}"> <small>[{% trans 'remove' %}]</small> </a> </td> |