Enforce escaping on all template content
This commit is contained in:
@@ -4,16 +4,16 @@
|
||||
<em class="muted">Mark as Free if Down for:</em><br/>
|
||||
<select id="nd_days-select" name="age_num">
|
||||
[% FOREACH count IN [1..31] %]
|
||||
<option[% ' selected="selected"' IF vars.sidebar_defaults.report_portutilization.age_num == count %]>[% count %]</option>
|
||||
<option[% ' selected="selected"' IF vars.sidebar_defaults.report_portutilization.age_num == count %]>[% count | html_entity %]</option>
|
||||
[% END %]
|
||||
</select>
|
||||
<select id="nd_age-select" name="age_unit">
|
||||
[% FOREACH unit IN [ 'days', 'weeks', 'months', 'years' ] %]
|
||||
<option[% ' selected="selected"' IF vars.sidebar_defaults.report_portutilization.age_unit == unit %]>[% unit %]</option>
|
||||
<option[% ' selected="selected"' IF vars.sidebar_defaults.report_portutilization.age_unit == unit %]>[% unit | html_entity %]</option>
|
||||
[% END %]
|
||||
</select>
|
||||
</div>
|
||||
|
||||
<button id="[% report.tag %]_submit" type="submit" class="btn btn-info">
|
||||
<button id="[% report.tag | html_entity %]_submit" type="submit" class="btn btn-info">
|
||||
<i class="icon-search icon-large pull-left nd_navbar-icon"></i> Run Report</button>
|
||||
|
||||
|
||||
Reference in New Issue
Block a user