diff --git a/cms/templates/js/video/transcripts/messages/transcripts-choose.underscore b/cms/templates/js/video/transcripts/messages/transcripts-choose.underscore
index d626443964..f7ae0a4c21 100644
--- a/cms/templates/js/video/transcripts/messages/transcripts-choose.underscore
+++ b/cms/templates/js/video/transcripts/messages/transcripts-choose.underscore
@@ -1,17 +1,17 @@
- <%= gettext("Timed Transcript Conflict") %>
+ <%- gettext("Timed Transcript Conflict") %>
- <%= gettext("The timed transcript for the first video file does not appear to be the same as the timed transcript for the second video file.") %>
+ <%- gettext("The timed transcript for the first video file does not appear to be the same as the timed transcript for the second video file.") %>
- <%= gettext("Which timed transcript would you like to use?") %>
+ <%- gettext("Which timed transcript would you like to use?") %>
- <%= gettext("Error.") %>
+ <%- gettext("Error.") %>
@@ -28,12 +28,12 @@
class="action setting-choose"
type="button"
name="setting-choose"
- data-video-id="<%= value %>"
- value="<%= message %>"
- data-tooltip="<%= message %>"
+ data-video-id="<%- value %>"
+ value="<%- message %>"
+ data-tooltip="<%- message %>"
>
- <%= message %>
+ <%= message %> <% // xss-lint: disable=underscore-not-escaped %>
<% }) %>