Andal.LND/edx-platform
6
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

Fix xss in transcript template

Browse Source 
PROD-2012
This commit is contained in:
uzairr
2020-08-21 12:56:30 +05:00
parent e890ec6dd5
commit 103a4f20a6
1 changed files with 9 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
cms/templates/js/video/transcripts/messages/transcripts-use-existing.underscore
View File

@@ -1,16 +1,16 @@
<div class="transcripts-message-status status-error">
<span class="icon fa fa-remove" aria-hidden="true"></span>
<%= gettext("Confirm Timed Transcript") %>
<%- gettext("Confirm Timed Transcript") %>
</div>
<p class="transcripts-message">
<%= gettext("You changed a video URL, but did not change the timed transcript file. Do you want to use the current timed transcript or upload a new .srt transcript file?") %>
<%- gettext("You changed a video URL, but did not change the timed transcript file. Do you want to use the current timed transcript or upload a new .srt transcript file?") %>
</p>
<div class="transcripts-file-uploader"></div>
<p class="transcripts-error-message is-invisible">
<%= gettext("Error.") %>
<%- gettext("Error.") %>
</p>
<div class="wrapper-transcripts-buttons">
@@ -18,22 +18,22 @@
class="action setting-use-existing"
type="button"
name="setting-use-existing"
value="<%= gettext("Use Current Transcript") %>"
data-tooltip="<%= gettext("Use Current Transcript") %>"
value="<%- gettext("Use Current Transcript") %>"
data-tooltip="<%- gettext("Use Current Transcript") %>"
>
<span>
<%= gettext("Use Current Transcript") %>
<%- gettext("Use Current Transcript") %>
</span>
</button>
<button
class="action setting-upload"
type="button"
name="setting-upload"
value="<%= gettext("Upload New Transcript") %>"
data-tooltip="<%= gettext("Upload New Transcript") %>"
value="<%- gettext("Upload New Transcript") %>"
data-tooltip="<%- gettext("Upload New Transcript") %>"
>
<span>
<%= gettext("Upload New Transcript") %>
<%- gettext("Upload New Transcript") %>
</span>
</button>
</div>