diff options
| author | Matthew Somerville <matthew-github@dracos.co.uk> | 2019-04-23 16:58:02 +0100 |
|---|---|---|
| committer | Matthew Somerville <matthew-github@dracos.co.uk> | 2019-04-24 11:19:51 +0100 |
| commit | 0e453a085a6e3249260fea7678a064b165e2bd6f (patch) | |
| tree | b48e104be9cf487f762b7011d5b8c0ac123410a1 | |
| parent | b47a0af62043a2fea7a6ef1aaa09c152e7b5d246 (diff) | |
Escape body name in admin title.
| -rw-r--r-- | CHANGELOG.md | 1 | ||||
| -rw-r--r-- | templates/web/base/admin/bodies/body.html | 3 | ||||
| -rw-r--r-- | templates/web/base/admin/bodies/category.html | 3 |
3 files changed, 5 insertions, 2 deletions
diff --git a/CHANGELOG.md b/CHANGELOG.md index 40e554cc3..16541c16a 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -40,6 +40,7 @@ - Fix extra question display when only one category. - Fix superusers creating anonymous reports. #2435 - Ensure non_public reports aren't exposed at /open311 endpoint. + - Escape body name in admin title. - Development improvements: - Make front page cache time configurable. - Better working of /fakemapit/ under https. diff --git a/templates/web/base/admin/bodies/body.html b/templates/web/base/admin/bodies/body.html index afd2eff46..8f298676e 100644 --- a/templates/web/base/admin/bodies/body.html +++ b/templates/web/base/admin/bodies/body.html @@ -1,4 +1,5 @@ -[% INCLUDE 'admin/header.html' title=tprintf(loc('Council contacts for %s'), body.name) -%] +[% body_name = body.name | html; + INCLUDE 'admin/header.html' title=tprintf(loc('Council contacts for %s'), body_name) -%] [% PROCESS 'admin/report_blocks.html' %] [% IF updated %] diff --git a/templates/web/base/admin/bodies/category.html b/templates/web/base/admin/bodies/category.html index 2f789ed81..de8cb19ec 100644 --- a/templates/web/base/admin/bodies/category.html +++ b/templates/web/base/admin/bodies/category.html @@ -1,4 +1,5 @@ -[% INCLUDE 'admin/header.html' title=tprintf(loc('Council contacts for %s'), body.name) -%] +[% body_name = body.name | html; + INCLUDE 'admin/header.html' title=tprintf(loc('Council contacts for %s'), body_name) -%] [% BLOCK highlightchanged_yesno %] [%- output = loc('No') %] |