Andal.LND/edx-platform
6
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

fix xss in transcript replace template

Browse Source 
PROD-2013
This commit is contained in:
uzairr
2020-08-21 13:08:43 +05:00
parent 4481908b02
commit ec5a1be52b
1 changed files with 7 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
cms/templates/js/video/transcripts/messages/transcripts-replace.underscore
View File

@@ -1,17 +1,17 @@
<div class="transcripts-message-status status-error">
<span class="icon fa fa-remove" aria-hidden="true"></span>
<%= gettext("Timed Transcript Conflict") %>
<%- gettext("Timed Transcript Conflict") %>
</div>
<p class="transcripts-message">
<%= gettext("The timed transcript for this video on edX is out of date, but YouTube has a current timed transcript for this video.") %>
<%- gettext("The timed transcript for this video on edX is out of date, but YouTube has a current timed transcript for this video.") %>
<strong>
<%= gettext("Do you want to replace the edX transcript with the YouTube transcript?") %>
<%- gettext("Do you want to replace the edX transcript with the YouTube transcript?") %>
</strong>
</p>
<p class="transcripts-error-message is-invisible">
<%= gettext("Error.") %>
<%- gettext("Error.") %>
</p>
<div class="wrapper-transcripts-buttons">
@@ -19,11 +19,11 @@
class="action setting-replace"
type="button"
name="setting-replace"
value="<%= gettext("Yes, replace the edX transcript with the YouTube transcript") %>"
data-tooltip="<%= gettext("Yes, replace the edX transcript with the YouTube transcript") %>"
value="<%- gettext("Yes, replace the edX transcript with the YouTube transcript") %>"
data-tooltip="<%- gettext("Yes, replace the edX transcript with the YouTube transcript") %>"
>
<span>
<%= gettext("Yes, replace the edX transcript with the YouTube transcript") %>
<%- gettext("Yes, replace the edX transcript with the YouTube transcript") %>
</span>
</button>
</div>