From ffd585cfab9f9b38f8798ea98bf26e3d2293daa0 Mon Sep 17 00:00:00 2001
From: uzairr <uzairr@yahoo.com>
Date: Fri, 21 Aug 2020 13:19:46 +0500
Subject: [PATCH] fix xss in grading editor template

PROD-2024
---
 cms/templates/js/grading-editor.underscore | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/cms/templates/js/grading-editor.underscore b/cms/templates/js/grading-editor.underscore
index 7db05aa5ff..243de60361 100644
--- a/cms/templates/js/grading-editor.underscore
+++ b/cms/templates/js/grading-editor.underscore
@@ -1,12 +1,12 @@
-<h3 class="modal-section-title"><%= gettext('Grading') %></h3>
+<h3 class="modal-section-title"><%- gettext('Grading') %></h3>
 <div class="modal-section-content grading-type">
     <ul class="list-fields list-input">
         <li class="field field-grading-type field-select">
-            <label for="grading_type" class="label"><%= gettext('Grade as:') %></label>
+            <label for="grading_type" class="label"><%- gettext('Grade as:') %></label>
             <select class="input" id="grading_type">
-                <option value="notgraded"><%= gettext('Not Graded') %></option>
+                <option value="notgraded"><%- gettext('Not Graded') %></option>
                 <% _.each(graderTypes, function(grader) { %>
-                  <option value="<%= grader %>"><%= grader %></option>
+                  <option value="<%- grader %>"><%- grader %></option>
                 <% }); %>
             </select>
         </li>