Andal.LND/edx-platform
4
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fix escaping of html tags.

Browse Source 
Using six.text_type() is converting
MarkSafe object created using HTML
function to simple string which is
essential html tags interpolation.
Applying escaping via Text function on
this string object is causing escaping
of html tags.

PROD-834
This commit is contained in:
Adeel Khan
2019-10-31 00:59:09 +05:00
parent 6b16a1b9c1
commit b82d1b964e
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
openedx/core/djangoapps/user_authn/views/login.py
View File

@@ -115,7 +115,7 @@ def _enforce_password_policy_compliance(request, user):
except password_policy_compliance.NonCompliantPasswordException as e:
send_password_reset_email_for_user(user, request)
# Prevent the login attempt.
raise AuthFailedError(six.text_type(e))
raise AuthFailedError(HTML(six.text_type(e)))
def _generate_not_activated_message(user):