Commit 53a29609 by Calen Pennington

XSS escape cms/templates/component.html

parent 7922dcbb
<%page expression_filter="h"/>
<%! from django.utils.translation import ugettext as _ %>
<%namespace name='static' file='static_content.html'/>
......@@ -27,4 +28,4 @@
</ul>
</div>
<span data-tooltip="${_("Drag to reorder")}" class="drag-handle action"></span>
${preview}
${preview | n}
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment