fix issue #3094 - angular code xss in comments
parent
f614c3eb19
commit
5eb173d9cf
|
@ -15,7 +15,7 @@ div(class!="activity-single <%- mode %>")
|
||||||
span(translate="COMMENTS.DELETED_INFO",
|
span(translate="COMMENTS.DELETED_INFO",
|
||||||
translate-values!="{ user: '<%- deleteCommentUser %>', date: '<%- deleteCommentDate %>'}")
|
translate-values!="{ user: '<%- deleteCommentUser %>', date: '<%- deleteCommentDate %>'}")
|
||||||
<% } %>
|
<% } %>
|
||||||
.comment.wysiwyg
|
.comment.wysiwyg(ng-non-bindable)
|
||||||
| <%= comment %>
|
| <%= comment %>
|
||||||
<% if (!deleteCommentDate && mode !== "activity" && canDeleteComment) { %>
|
<% if (!deleteCommentDate && mode !== "activity" && canDeleteComment) { %>
|
||||||
a(href="", class="icon icon-delete comment-delete", data-activity-id!="<%- activityId %>")
|
a(href="", class="icon icon-delete comment-delete", data-activity-id!="<%- activityId %>")
|
||||||
|
|
Loading…
Reference in New Issue