applying filter to remove dangerous html content before rendering in

course_about page on course overview field
This commit is contained in:
Hammad Ahmad Waqas
2019-06-18 12:43:17 +05:00
parent e311dc2e4c
commit 63d7b7d6fa
3 changed files with 85 additions and 2 deletions

View File

@@ -9,7 +9,7 @@ from django.conf import settings
from six import text_type
from edxmako.shortcuts import marketing_link
from openedx.core.djangolib.js_utils import js_escaped_string
from openedx.core.djangolib.markup import HTML, Text
from openedx.core.djangolib.markup import clean_dangerous_html, HTML, Text
from openedx.core.lib.courses import course_image_url
from six import string_types
@@ -207,7 +207,7 @@ from six import string_types
% endif
<div class="inner-wrapper">
${HTML(get_course_about_section(request, course, "overview"))}
${clean_dangerous_html(get_course_about_section(request, course, "overview"))}
</div>
</div>
</%block>