add escaping

This commit is contained in:
Chris Dodge
2013-08-19 11:42:16 -04:00
parent f599d4b508
commit 2e1eb1dce5

View File

@@ -144,7 +144,7 @@
</a>
% else:
<div class="cover">
<img src="${course_image_url(course)}" alt="${_('{course_number} {course_name} Cover Image').format(course_number=course.number, course_name=course.display_name_with_default)}" />
<img src="${course_image_url(course)}" alt="${_('{course_number} {course_name} Cover Image').format(course_number=course.number, course_name=course.display_name_with_default) | h}" />
</div>
% endif