Andal.LND/edx-platform
4
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fixed xss linter violations

Browse Source 
PROD-1725
PROD-1726
PROD-1617
This commit is contained in:
adeelehsan
2020-07-22 16:05:26 +05:00
parent b7fdee226b
commit c8e0a28bab
3 changed files with 4 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
lms/djangoapps/support/static/support/js/views/enrollment_modal.js
View File

@@ -21,6 +21,7 @@
}, },
render: function() { render: function() {
// xss-lint: disable=javascript-jquery-html
this.$el.html(_.template(this.template)({ this.$el.html(_.template(this.template)({
enrollment: this.enrollment, enrollment: this.enrollment,
modes: this.modes, modes: this.modes,

4
lms/djangoapps/support/static/support/templates/enrollment.underscore
View File

@@ -48,8 +48,8 @@
<td> <td>
<button <button
class="change-enrollment-btn" class="change-enrollment-btn"
data-modes="<%= _.pluck(enrollment.get('course_modes'), 'slug')%>" data-modes="<%- _.pluck(enrollment.get('course_modes'), 'slug')%>"
data-course_id="<%= enrollment.get('course_id') %>" data-course_id="<%- enrollment.get('course_id') %>"
> >
<%- gettext('Change Enrollment') %> <%- gettext('Change Enrollment') %>
</button> </button>

2
lms/templates/api_admin/api_access_request_form.html
View File

@@ -16,7 +16,7 @@
<div class="api-form-container"> <div class="api-form-container">
<form action="" method="post" class="api-form"> <form action="" method="post" class="api-form">
<input type="hidden" id="csrf_token" name="csrfmiddlewaretoken" value="${csrf_token}"> <input type="hidden" id="csrf_token" name="csrfmiddlewaretoken" value="${csrf_token}">
${form.as_p() | n} ${form.as_p() | n, decode.utf8}
<input id="api-access-submit" type="submit" value="${_('Request API Access')}"/> <input id="api-access-submit" type="submit" value="${_('Request API Access')}"/>
</form> </form>
</div> </div>