diff options
| author | Michael Walker <mike@barrucadu.co.uk> | 2014-07-05 21:54:21 +0100 |
|---|---|---|
| committer | Michael Walker <mike@barrucadu.co.uk> | 2014-07-05 21:57:06 +0100 |
| commit | 8aff83bdd4f561e28bd8d2d622263f5c602c7a84 (patch) | |
| tree | c78ebcd506bbc734123ba875823d49e12965b18f /templates | |
| parent | 9df6ca8dddb8dabfa30069cdf5f1e0bb45cea793 (diff) | |
Fix unsanitised text vulnerability in post/fileinfo.html
Diffstat (limited to 'templates')
| -rw-r--r-- | templates/post/fileinfo.html | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/templates/post/fileinfo.html b/templates/post/fileinfo.html index f862f59d..1f3ca4b5 100644 --- a/templates/post/fileinfo.html +++ b/templates/post/fileinfo.html @@ -22,7 +22,7 @@ {% if config.show_filename and file.filename %} , {% if file.filename|length > config.max_filename_display %} - <span class="postfilename" title="{{ file.filename|e }}">{{ file.filename|truncate_filename(config.max_filename_display)|bidi_cleanup }}</span> + <span class="postfilename" title="{{ file.filename|e|bidi_cleanup }}">{{ file.filename|truncate_filename(config.max_filename_display)|bidi_cleanup }}</span> {% else %} <span class="postfilename">{{ file.filename|e|bidi_cleanup }}</span> {% endif %} |