Make base.html Mako template safe by default by: 1. Add page-level default of html escaping 2. Fix escaping of all variables in base.html 3. Fix escaping of all dependent underscore templates Also includes additional best practices for certificates and textbooks JavaScript/Underscore in order to complete that work. TNL-3425
15 lines
1.4 KiB
Plaintext
15 lines
1.4 KiB
Plaintext
<div class="input-wrap field text required field-add-chapter-name chapter<%- order %>-name
|
|
<% if (error && error.attributes && error.attributes.name) { print('error'); } %>">
|
|
<label for="chapter<%- order %>-name"><%- gettext("Chapter Name") %></label>
|
|
<input id="chapter<%- order %>-name" name="chapter<%- order %>-name" class="chapter-name short" placeholder="<%- _.str.sprintf(gettext("Chapter %s"), order) %>" value="<%- name %>" type="text">
|
|
<span class="tip tip-stacked"><%- gettext("provide the title/name of the chapter that will be used in navigating") %></span>
|
|
</div>
|
|
<div class="input-wrap field text required field-add-chapter-asset chapter<%- order %>-asset
|
|
<% if (error && error.attributes && error.attributes.asset_path) { print('error'); } %>">
|
|
<label for="chapter<%- order %>-asset-path"><%- gettext("Chapter Asset") %></label>
|
|
<input id="chapter<%- order %>-asset-path" name="chapter<%- order %>-asset-path" class="chapter-asset-path" placeholder="<%- _.str.sprintf(gettext("path/to/introductionToCookieBaking-CH%d.pdf"), order) %>" value="<%- asset_path %>" type="text" dir="ltr">
|
|
<span class="tip tip-stacked"><%- gettext("upload a PDF file or provide the path to a Studio asset file") %></span>
|
|
<button class="action action-upload"><%- gettext("Upload PDF") %></button>
|
|
</div>
|
|
<a href="" class="action action-close"><i class="icon fa fa-times-circle"></i> <span class="sr"><%- gettext("delete chapter") %></span></a>
|