Enforce escaping on all template content

2019-09-23 14:22:00 +01:00
parent 5f378a39ea
commit deb9b62c7f
77 changed files with 392 additions and 387 deletions
--- a/share/views/sidebar/search/device.tt
+++ b/share/views/sidebar/search/device.tt
@@ -95,5 +95,5 @@
                <span class="nd_searchcheckbox uneditable-input">Match All Options</span>
              </label>
            </div>
-            <button id="[% tab.tag %]_submit" type="submit" class="btn btn-info">
+            <button id="[% tab.tag | html_entity %]_submit" type="submit" class="btn btn-info">
              <i class="icon-search icon-large pull-left nd_navbar-icon"></i> Search Devices</button>