PROD-1574

2020-06-10 18:38:00 +05:00
parent c9e24e9a1d
commit 0ecbe873d9
1 changed files with 9 additions and 2 deletions
--- a/openedx/core/djangoapps/cors_csrf/templates/cors_csrf/xdomain_proxy.html
+++ b/openedx/core/djangoapps/cors_csrf/templates/cors_csrf/xdomain_proxy.html
@@ -1,5 +1,12 @@
-<%namespace name='static' file='../static_content.html'/>
+<%page expression_filter="h"/>

+<%namespace name='static' file='../static_content.html'/>
+<%!
+from openedx.core.djangolib.js_utils import (
+    dump_js_escaped_json
+)
+%>
+<%! import json %>
 <!DOCTYPE HTML>
 <script src="${static.url('js/vendor/xdomain.min.js')}"></script>
-<script>xdomain.masters(${xdomain_masters});</script>
+<script>xdomain.masters(${json.loads(xdomain_masters) | n, dump_js_escaped_json});</script>