From ea2b8cce077a092e0cbf136f9a45158668cc5ecf Mon Sep 17 00:00:00 2001
From: Michael Foster <savetheinternet@tinyboard.org>
Date: Wed, 31 Jul 2013 21:24:17 -0400
Subject: Bugfix: HTML injection in post editing (introduces and fixes yet
 another bug)

---
 templates/mod/edit_post_form.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'templates/mod/edit_post_form.html')

diff --git a/templates/mod/edit_post_form.html b/templates/mod/edit_post_form.html
index 146e725b..b9359c68 100644
--- a/templates/mod/edit_post_form.html
+++ b/templates/mod/edit_post_form.html
@@ -32,7 +32,7 @@
 				{% trans %}Comment{% endtrans %}
 			</th>
 			<td>
-				<textarea name="body" id="body" rows="8" cols="35">{% if raw %}{{ post.body | e }}{% else %}{{ post.body_nomarkup }}{% endif %}</textarea>
+				<textarea name="body" id="body" rows="8" cols="35">{% if raw %}{{ post.body|e }}{% else %}{{ post.body_nomarkup|e }}{% endif %}</textarea>
 			</td>
 		</tr>
 	</table>
-- 
cgit v1.3