Enforce escaping on all template content

2019-09-23 14:22:00 +01:00
parent 5f378a39ea
commit deb9b62c7f
77 changed files with 392 additions and 387 deletions
--- a/share/views/js/admintask.js
+++ b/share/views/js/admintask.js
@@ -78,7 +78,7 @@

  // on load, establish global delegations for now and future
  $(document).ready(function() {
-    var tab = '[% task.tag %]'
+    var tab = '[% task.tag | html_entity %]'
    var target = '#' + tab + '_pane';

    // get all devices on device input focus