From 868b076ea750b8c75123cc0b6828a43734d3e6fe Mon Sep 17 00:00:00 2001
From: Victor Shnayder <victor@mitx.mit.edu>
Date: Mon, 20 Aug 2012 15:00:22 -0400
Subject: [PATCH] html escape errors

---
 lms/templates/courseware/courseware.html | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/lms/templates/courseware/courseware.html b/lms/templates/courseware/courseware.html
index e1d6d11f37..b63ff89f5c 100644
--- a/lms/templates/courseware/courseware.html
+++ b/lms/templates/courseware/courseware.html
@@ -54,8 +54,8 @@
           <div id="course-errors">
             <ul>
           % for (msg, err) in course_errors:
-            <li>${msg}
-              <ul><li><pre>${err}</pre></li></ul>
+            <li>${msg | h}
+              <ul><li><pre>${err | h}</pre></li></ul>
             </li>
           % endfor
             </ul>