nakidai
/
whoogle-search
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Render error message w/o `safe` filter 

The error message shown in the error template does not need to be
rendered using the safe filter, and furthermore opens up an XSS
vulnerability.
main
Ben Busby 2022-04-26 09:28:05 -06:00
parent d62ceb8423
commit abc30d7da3
No known key found for this signature in database
GPG Key ID: B9B7231E01D924A1
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
app/templates/error.html
View File

@ -16,7 +16,7 @@
<div> <div>
<h1>Error</h1> <h1>Error</h1>
<p> <p>
{{ error_message|safe }} {{ error_message }}
</p> </p>
<hr> <hr>
<p> <p>