Andal.LND/edx-platform
6
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix xss in edit section template

Browse Source 
PROD-2011
This commit is contained in:
uzairr
2020-08-21 13:06:35 +05:00
parent 57823e16dc
commit 4481908b02
1 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
cms/templates/js/section-name-edit.underscore
View File

@@ -1,5 +1,5 @@
<form class="section-name-edit">
<input type="text" value="<%= name %>" autocomplete="off"/>
<input type="submit" class="save-button" value="<%= gettext("Save") %>" />
<input type="button" class="cancel-button" value="<%= gettext("Cancel") %>" />
<input type="text" value="<%- name %>" autocomplete="off"/>
<input type="submit" class="save-button" value="<%- gettext("Save") %>" />
<input type="button" class="cancel-button" value="<%- gettext("Cancel") %>" />
</form>