Replace dangerous unescaped interpolation with #{

merge-requests/341/head
Thomas Lynch 11 months ago
parent 52dd14e001
commit 9c1b881b4b
  1. 8
      views/mixins/filter.pug

@ -5,7 +5,7 @@ mixin filter(f, globalmanage=false)
input.left.post-check(type='checkbox', name='checkedfilters' value=f._id)
td
each line in f.filters
pre.no-m-p.nowrap !{line}
pre.no-m-p.nowrap #{line}
td.text-center
label
input(type='checkbox', name='strict_filtering', value='true', checked=f.strictFiltering, disabled='true')
@ -19,9 +19,9 @@ mixin filter(f, globalmanage=false)
else
p.no-m-p.nowrap ?
td
p.no-m-p !{f.filterMessage}
p.no-m-p #{f.filterMessage}
td
p.no-m-p(style='text-align:right;') !{f.filterBanDuration}
p.no-m-p(style='text-align:right;') #{f.filterBanDuration}
td.text-center
label
input(type='checkbox', name='filter_ban_appealable', value='true', checked=f.filterBanAppealable, disabled='true')
@ -29,4 +29,4 @@ mixin filter(f, globalmanage=false)
if globalmanage
a.ml-5(href=`/globalmanage/editfilter/${f._id}.html`, style='overflow-wrap: break-word;') [#{__('Edit')}]
else
a.ml-5(href=`/${board._id}/manage/editfilter/${f._id}.html`, style='overflow-wrap: break-word;') [#{__('Edit')}]
a.ml-5(href=`/${board._id}/manage/editfilter/${f._id}.html`, style='overflow-wrap: break-word;') [#{__('Edit')}]

Loading…
Cancel
Save