diff options
author | Matthew Somerville <matthew@mysociety.org> | 2019-12-09 15:01:15 +0000 |
---|---|---|
committer | Dave Arter <davea@mysociety.org> | 2019-12-09 15:33:34 +0000 |
commit | 3e61279999c83fb5b5891f74b07143dd046ca887 (patch) | |
tree | 1a8982bc6921dbe2b287f928c1dfa72f4b276c3b | |
parent | 71c75504ea249b167d04bc9f5715d832716acec7 (diff) |
[TfL] Mark email template parts as safe.
-rw-r--r-- | templates/email/tfl/other-reported.html | 4 | ||||
-rw-r--r-- | templates/email/tfl/problem-confirm.html | 4 | ||||
-rw-r--r-- | templates/email/tfl/submit.html | 6 |
3 files changed, 7 insertions, 7 deletions
diff --git a/templates/email/tfl/other-reported.html b/templates/email/tfl/other-reported.html index 4d7579b30..f28f5a819 100644 --- a/templates/email/tfl/other-reported.html +++ b/templates/email/tfl/other-reported.html @@ -9,14 +9,14 @@ INCLUDE '_email_top.html'; %] <th style="[% td_style %][% primary_column_style %]" id="primary_column"> - [% start_padded_box %] + [% start_padded_box | safe %] <h1 style="[% h1_style %]">Your report has been logged</h1> <p style="[% p_style %]">Your report to Transport for London has been logged on [% site_name %].</p> [% TRY %][% INCLUDE '_council_reference.html' problem=report %][% CATCH file %][% END %] <p style="margin: 20px auto; text-align: center"> <a style="[% button_style %]" href="[% cobrand.base_url_for_report(report) %][% report.url %]">View my report</a> </p> - [% end_padded_box %] + [% end_padded_box | safe %] </th> [% WRAPPER '_email_sidebar.html' object = report %] <h2 style="[% h2_style %]">[% report.title | html %]</h2> diff --git a/templates/email/tfl/problem-confirm.html b/templates/email/tfl/problem-confirm.html index 458e7bed9..7d083d82e 100644 --- a/templates/email/tfl/problem-confirm.html +++ b/templates/email/tfl/problem-confirm.html @@ -10,7 +10,7 @@ INCLUDE '_email_top.html'; %] <th style="[% td_style %][% primary_column_style %]" id="primary_column"> - [% start_padded_box %] + [% start_padded_box | safe %] <h1 style="[% h1_style %]">Please confirm your report</h1> <p style="[% p_style %]">Please click on the link below to confirm that you want to send your report to Transport for London.</p> [% UNLESS report.non_public %]<p style="[% p_style %]">Your report will also appear on the [% site_name %] website.</p>[% END %] @@ -18,7 +18,7 @@ INCLUDE '_email_top.html'; <a style="[% button_style %]" href="[% token_url %]">Yes, send my report</a> </p> <p style="[% p_style %]">If you no longer wish to send this report, please take no further action.</p> - [% end_padded_box %] + [% end_padded_box | safe %] </th> [% WRAPPER '_email_sidebar.html' object = report, url = token_url %] <h2 style="[% h2_style %]">[% report.title | html %]</h2> diff --git a/templates/email/tfl/submit.html b/templates/email/tfl/submit.html index 52c8602f4..a1bd8f134 100644 --- a/templates/email/tfl/submit.html +++ b/templates/email/tfl/submit.html @@ -11,7 +11,7 @@ INCLUDE '_email_top.html'; %] <th style="[% td_style %][% primary_column_style %]" id="primary_column"> - [% start_padded_box %] + [% start_padded_box | safe %] <h1 style="[% h1_style %]">New problem in your area</h1> <p style="[% p_style %]">[% multiple %]A user of [% site_name %] has submitted the following report of a local problem that they believe might require your attention.</p> @@ -22,7 +22,7 @@ of a local problem that they believe might require your attention.</p> <a style="[% button_style %]" href="[% url %]">Show full report</a> </p> <h2 style="[% h2_style %] margin: 30px 0 10px 0">Reported by:</h2> - <table [% table_reset %]> + <table [% table_reset | safe %]> <tr> <th style="[% contact_th_style %]">Name</th> <td style="[% contact_td_style %]">[% report.name | html %]</td> @@ -45,7 +45,7 @@ of a local problem that they believe might require your attention.</p> [%~ END %] </table> <p style="[% p_style %] margin-top: 0.5em;">Replies to this message will go directly to [% report.name | html %], the user who reported the problem.</p> - [% end_padded_box %] + [% end_padded_box | safe %] </th> [% WRAPPER '_email_sidebar.html' object = report %] <h2 style="[% h2_style %]">[% report.title | html %]</h2> |