Enforce escaping on all template content

2019-09-23 14:22:00 +01:00
parent 5f378a39ea
commit deb9b62c7f
77 changed files with 392 additions and 387 deletions
--- a/share/config.yml
+++ b/share/config.yml
@@ -483,11 +483,15 @@ show_errors: false
 logger: 'console'
 engines:
  netdisco_template_toolkit:
+    subclass: 'Template::AutoFilter'
    encoding: 'utf8'
    start_tag: '[%'
    end_tag: '%]'
+    ANYCASE: 1
+    ABSOLUTE: 1
    PRE_CHOMP: 1
    INCLUDE_PATH: []
+    AUTO_FILTER: 'html_entity'
 layout: 'main'
 plugins:
  Swagger: