Skip to content

Commit

Permalink
fix: escape the ballot comments (#3952)
Browse files Browse the repository at this point in the history 
I wonder if other fields that have class `pasted` would need to be escaped, too?
  • Loading branch information
@larseggert
larseggert authored May 12, 2022
1 parent cb996c5 commit 39525a1
Showing 1 changed file with 4 additions and 4 deletions.
8 changes: 4 additions & 4 deletions ietf/templates/doc/document_ballot_content.html
View file
Original file line number Diff line number Diff line change
Expand Up @@ -122,7 +122,7 @@
</div>
</div>
<div class="card-body">
<pre class="ballot pasted">{{ p.discuss|urlize_ietf_docs|linkify }}</pre>
<pre class="ballot pasted">{{ p.discuss|escape|urlize_ietf_docs|linkify }}</pre>
</div>
</div>
{% endif %}
Expand All @@ -148,7 +148,7 @@
</div>
</div>
<div class="card-body">
<pre class="ballot pasted">{{ p.comment|urlize_ietf_docs|linkify }}</pre>
<pre class="ballot pasted">{{ p.comment|escape|urlize_ietf_docs|linkify }}</pre>
</div>
</div>
{% endif %}
Expand Down Expand Up @@ -199,11 +199,11 @@
</div>
{% if p.pos.blocking and p.discuss %}
<div class="card-body">
<pre class="ballot pasted">{{ p.discuss|urlize_ietf_docs|linkify }}</pre>
<pre class="ballot pasted">{{ p.discuss|escape|urlize_ietf_docs|linkify }}</pre>
</div>
{% else %}
<div class="card-body">
<pre class="ballot pasted">{{ p.comment|urlize_ietf_docs|linkify }}</pre>
<pre class="ballot pasted">{{ p.comment|escape|urlize_ietf_docs|linkify }}</pre>
</div>
{% endif %}
</div>
Expand Down

0 comments on commit 39525a1

Please sign in to comment.