Enforce escaping on all template content

This commit is contained in:
Oliver Gorwits
2019-09-23 14:22:00 +01:00
parent 5f378a39ea
commit deb9b62c7f
77 changed files with 392 additions and 387 deletions

View File

@@ -18,14 +18,14 @@
<th>
[% IF platform.vendor %]
<a class="nd_linkcell"
href="[% search_device %]&q=[% platform.vendor | uri %]&vendor=[% platform.vendor | uri %]">
href="[% search_device | none %]&q=[% platform.vendor | uri %]&vendor=[% platform.vendor | uri %]">
[% platform.vendor | html_entity %]</a>
[% ELSE %]unknown[% END %]
</th>
<th>
[% IF platform.model %]
<a class="nd_linkcell"
href="[% search_device %]&q=[% platform.model | uri %]&model=[% platform.model | uri %]">
href="[% search_device | none %]&q=[% platform.model | uri %]&model=[% platform.model | uri %]">
[% platform.model | html_entity %]</a>
[% ELSE %]unknown[% END %]
</th>
@@ -52,14 +52,14 @@
<th>
[% IF release.os %]
<a class="nd_linkcell"
href="[% search_device %]&q=[% release.os | uri %]&os=[% release.os | uri %]">
href="[% search_device | none %]&q=[% release.os | uri %]&os=[% release.os | uri %]">
[% release.os | html_entity %]</a>
[% ELSE %]unknown[% END %]
</th>
<th>
[% IF release.os_ver %]
<a class="nd_linkcell"
href="[% search_device %]&q=[% release.os_ver | uri %]&os_ver=[% release.os_ver | uri %]">
href="[% search_device | none %]&q=[% release.os_ver | uri %]&os_ver=[% release.os_ver | uri %]">
[% release.os_ver | html_entity %]</a>
[% ELSE %]unknown[% END %]
</th>