Enforce escaping on all template content
This commit is contained in:
@@ -28,5 +28,5 @@
|
||||
</div>
|
||||
</fieldset>
|
||||
|
||||
<button id="[% report.tag %]_submit" type="submit" class="btn btn-info">
|
||||
<button id="[% report.tag | html_entity %]_submit" type="submit" class="btn btn-info">
|
||||
<i class="icon-search icon-large pull-left nd_navbar-icon"></i> Search Subnets</button>
|
||||
|
||||
Reference in New Issue
Block a user