fix issue #3094 - angular code xss in comments

stable
Juanfran 2015-07-22 14:56:36 +02:00
parent f614c3eb19
commit 5eb173d9cf
1 changed files with 1 additions and 1 deletions

View File

@ -15,7 +15,7 @@ div(class!="activity-single <%- mode %>")
span(translate="COMMENTS.DELETED_INFO",
translate-values!="{ user: '<%- deleteCommentUser %>', date: '<%- deleteCommentDate %>'}")
<% } %>
.comment.wysiwyg
.comment.wysiwyg(ng-non-bindable)
| <%= comment %>
<% if (!deleteCommentDate && mode !== "activity" && canDeleteComment) { %>
a(href="", class="icon icon-delete comment-delete", data-activity-id!="<%- activityId %>")