Merge pull request #466 from MITx/feature/victor/html-escape-errors

html escape errors
2012-08-20 19:11:38 -07:00
parent ef2bfac32a 868b076ea7
commit 27c0104bfb
1 changed files with 2 additions and 2 deletions
--- a/lms/templates/courseware/courseware.html
+++ b/lms/templates/courseware/courseware.html
@@ -54,8 +54,8 @@
          <div id="course-errors">
            <ul>
          % for (msg, err) in course_errors:
-            <li>${msg}
-              <ul><li><pre>${err}</pre></li></ul>
+            <li>${msg | h}
+              <ul><li><pre>${err | h}</pre></li></ul>
            </li>
          % endfor
            </ul>