diff options
| author | zeripath <art27@cantab.net> | 2020-08-28 05:37:05 +0100 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2020-08-28 00:37:05 -0400 |
| commit | d3b5edacb655ced0135ca5f48544612ccc38890e (patch) | |
| tree | a77a1fa8e66bb1235e8bbec03d2764c1df6799b8 /templates/user/auth | |
| parent | cbc60f5c70dac01af647e5f70730778b008cf234 (diff) | |
| download | gitea-d3b5edacb655ced0135ca5f48544612ccc38890e.tar.gz gitea-d3b5edacb655ced0135ca5f48544612ccc38890e.zip | |
Escape more things that are passed through str2html (#12622)
* Escape more things that are passed through str2html
Signed-off-by: Andrew Thornton <art27@cantab.net>
* Bloody editors!
Co-authored-by: mrsdizzie <info@mrsdizzie.com>
* Update routers/user/oauth.go
Co-authored-by: mrsdizzie <info@mrsdizzie.com>
Co-authored-by: techknowlogick <techknowlogick@gitea.io>
Diffstat (limited to 'templates/user/auth')
| -rw-r--r-- | templates/user/auth/activate.tmpl | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/templates/user/auth/activate.tmpl b/templates/user/auth/activate.tmpl index 92b85a1373..c24362bb8c 100644 --- a/templates/user/auth/activate.tmpl +++ b/templates/user/auth/activate.tmpl @@ -15,15 +15,15 @@ {{else if .ResendLimited}} <p class="center">{{.i18n.Tr "auth.resent_limit_prompt"}}</p> {{else}} - <p>{{.i18n.Tr "auth.confirmation_mail_sent_prompt" .SignedUser.Email .ActiveCodeLives | Str2html}}</p> + <p>{{.i18n.Tr "auth.confirmation_mail_sent_prompt" (.SignedUser.Email|Escape) .ActiveCodeLives | Str2html}}</p> {{end}} {{else}} {{if .IsSendRegisterMail}} - <p>{{.i18n.Tr "auth.confirmation_mail_sent_prompt" .Email .ActiveCodeLives | Str2html}}</p> + <p>{{.i18n.Tr "auth.confirmation_mail_sent_prompt" (.Email|Escape) .ActiveCodeLives | Str2html}}</p> {{else if .IsActivateFailed}} <p>{{.i18n.Tr "auth.invalid_code"}}</p> {{else}} - <p>{{.i18n.Tr "auth.has_unconfirmed_mail" .SignedUser.Name .SignedUser.Email | Str2html}}</p> + <p>{{.i18n.Tr "auth.has_unconfirmed_mail" (.SignedUser.Name|Escape) (.SignedUser.Email|Escape) | Str2html}}</p> <div class="ui divider"></div> <div class="text right"> <button class="ui blue button">{{.i18n.Tr "auth.resend_mail"}}</button> |