Make base.html Mako template safe by default by: 1. Add page-level default of html escaping 2. Fix escaping of all variables in base.html 3. Fix escaping of all dependent underscore templates Also includes additional best practices for certificates and textbooks JavaScript/Underscore in order to complete that work. TNL-3425
34 lines
1.5 KiB
Plaintext
34 lines
1.5 KiB
Plaintext
<div class="signatory-panel-default">
|
|
<% if (CMS.User.isGlobalStaff || !certificate.get('is_active')) { %>
|
|
<div class="actions certificate-actions signatory-panel-edit">
|
|
<span class="action action-edit-signatory">
|
|
<a href="javascript:void(0);" class="edit-signatory"><i class="icon fa fa-pencil" aria-hidden="true"></i> <%- gettext("Edit") %></a>
|
|
</span>
|
|
</div>
|
|
<% } %>
|
|
<div class="signatory-panel-header"><%- gettext("Signatory") %> <%- signatory_number %> </div>
|
|
<div class="signatory-panel-body">
|
|
<div>
|
|
<div>
|
|
<span class="signatory-name-label"><b><%- gettext("Name") %>:</b> </span>
|
|
<span class="signatory-name-value"><%- name %></span>
|
|
</div>
|
|
<div>
|
|
<span class="signatory-title-label"><b><%- gettext("Title") %>:</b> </span>
|
|
<span class="signatory-title-value"><%= _.escape(title).replace(new RegExp('\r?\n','g'), '<br />') %></span>
|
|
</div>
|
|
<div>
|
|
<span class="signatory-organization-label"><b><%- gettext("Organization") %>:</b> </span>
|
|
<span class="signatory-organization-value"><%- organization %></span>
|
|
</div>
|
|
</div>
|
|
<div class="signatory-image">
|
|
<% if (signature_image_path != "") { %>
|
|
<div class="wrapper-signature-image">
|
|
<img class="signature-image" src="<%- signature_image_path %>" alt="<%- gettext('Signature Image') %>">
|
|
</div>
|
|
<% } %>
|
|
</div>
|
|
</div>
|
|
</div>
|