applying filter to remove dangerous html content before rendering in
course_about page on course overview field
This commit is contained in:
@@ -9,7 +9,7 @@ from django.conf import settings
|
||||
from six import text_type
|
||||
from edxmako.shortcuts import marketing_link
|
||||
from openedx.core.djangolib.js_utils import js_escaped_string
|
||||
from openedx.core.djangolib.markup import HTML, Text
|
||||
from openedx.core.djangolib.markup import clean_dangerous_html, HTML, Text
|
||||
from openedx.core.lib.courses import course_image_url
|
||||
|
||||
from six import string_types
|
||||
@@ -207,7 +207,7 @@ from six import string_types
|
||||
% endif
|
||||
|
||||
<div class="inner-wrapper">
|
||||
${HTML(get_course_about_section(request, course, "overview"))}
|
||||
${clean_dangerous_html(get_course_about_section(request, course, "overview"))}
|
||||
</div>
|
||||
</div>
|
||||
</%block>
|
||||
|
||||
Reference in New Issue
Block a user