Enforce escaping on all template content

This commit is contained in:
Oliver Gorwits
2019-09-23 14:22:00 +01:00
parent 5f378a39ea
commit deb9b62c7f
77 changed files with 392 additions and 387 deletions

View File

@@ -82,7 +82,7 @@
rel="tooltip" data-placement="left" data-offset="5" data-title="Host Groups">
[% FOREACH opt IN hgroup_list.pairs %]
<option[% ' selected="selected"' IF hgroup_lkp.exists(opt.key) %]
value="[% opt.key %]">[% opt.value | html_entity %]</option>
value="[% opt.key | html_entity %]">[% opt.value | html_entity %]</option>
[% END %]
</select>
[% END %]
@@ -92,7 +92,7 @@
rel="tooltip" data-placement="left" data-offset="5" data-title="Device Locations">
[% FOREACH loc IN lgroup_list %]
<option[% ' selected="selected"' IF lgroup_lkp.exists(loc) %]
value="[% loc %]">[% loc | html_entity %]</option>
value="[% loc | html_entity %]">[% loc | html_entity %]</option>
[% END %]
</select>
[% END %]
@@ -132,6 +132,6 @@
</div>
<button id="[% tab.tag %]_submit" type="submit" class="btn btn-info">
<button id="[% tab.tag | html_entity %]_submit" type="submit" class="btn btn-info">
<i class="icon-pencil icon-large pull-left nd_navbar-icon"></i>
Redraw Map</button>