298d3554fe
This would patch all templates (django/mako) for a possible XSS code injection via translation files by html escaping them.. LEARNER-4632
10 lines
408 B
HTML
10 lines
408 B
HTML
{% load i18n %}
|
|
<p id="hint_id_content" class="help-block">
|
|
{% filter force_escape %}
|
|
{% blocktrans with start_link="<a id='cheatsheetLink' href='#cheatsheetModal' rel='leanModal'>" end_link="</a>" trimmed %}
|
|
Markdown syntax is allowed. See the {{ start_link }}cheatsheet{{ end_link }} for help.
|
|
{% endblocktrans %}
|
|
{% endfilter %}
|
|
</p>
|
|
<textarea {{ attrs }}>{{ content }}</textarea>
|