Fix similar XSS issues.

This commit is contained in:
James Cole
2019-08-03 05:08:35 +02:00
parent 8717f469b1
commit 2d7494f8cd
9 changed files with 28 additions and 28 deletions

View File

@@ -12,7 +12,7 @@
{% else %}
{{ Form.checkbox(name~'[]', id, false, options) }}
{% endif %}
{{ account }}
{{ account|escape }}
</label>
</div>
{% endfor %}

View File

@@ -64,7 +64,7 @@
{% endif %}
{% endfor %}
{% if account.status != 'ACTIVE' %}
<li>{{ trans('import.bunq_account_status_'~account.status) }}</li>
<li>{{ trans('import.bunq_account_status_'~account.status|escape) }}</li>
{% endif %}
{% if account.type == 'MonetaryAccountSavings' %}
<li>{{ trans('import.bunq_savings_goal', {'amount': account.savingsGoal.currency ~' '~account.savingsGoal.value,'percentage' : account.savingsGoal.percentage}) }}</li>