Files
edx-platform/lms/templates/resubscribe.html
Adeel Khan 298d3554fe Fix templates for XSS code injection via translations
This would patch all templates (django/mako)
for a possible XSS code injection via
translation files by html escaping them..

LEARNER-4632
2019-06-25 14:22:42 +05:00

27 lines
836 B
HTML

<%page expression_filter="h"/>
<%!
from django.urls import reverse
from django.utils.translation import ugettext as _
from openedx.core.djangolib.markup import HTML, Text
from django.conf import settings
%>
<%inherit file="main.html" />
<%namespace name='static' file='static_content.html'/>
<section class="container unsubscribe">
<section class="message">
<h1>${_("Re-subscribe Successful!")}</h1>
<hr class="horizontal-divider">
<p>
${Text(_("You have re-enabled forum notification emails from {platform_name}. "
"You may {dashboard_link_start}return to your dashboard{link_end}.")).format(
platform_name=settings.PLATFORM_NAME,
dashboard_link_start=HTML("<a href='{}'>").format(reverse('dashboard')),
link_end=HTML("</a>"),)}
</p>
</section>
</section>