From 99834f0d7eb52a0298df86e529e5e47d7f78635a Mon Sep 17 00:00:00 2001 From: Thomas Date: Mon, 8 Mar 2021 15:53:01 +0100 Subject: [PATCH] Merge pull request #3738 from overleaf/jpa-fix-xss-registration [misc] fix angular xss on user registration page GitOrigin-RevId: 5dcc2aa0212371f154fba563d21018379292b9fe --- services/web/app/views/user/register.pug | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/services/web/app/views/user/register.pug b/services/web/app/views/user/register.pug index 8a196e2cc7..31b67e4591 100644 --- a/services/web/app/views/user/register.pug +++ b/services/web/app/views/user/register.pug @@ -14,7 +14,7 @@ block content | #{translate("if_you_are_registered")}, a(href="/login") #{translate("login_here")} else if newTemplateData.templateName !== undefined - h1 #{translate("register_to_edit_template", {templateName:newTemplateData.templateName})} + h1(ng-non-bindable) #{translate("register_to_edit_template", {templateName:newTemplateData.templateName})} div #{translate("already_have_sl_account")} a(href="/login") #{translate("login_here")} @@ -25,6 +25,6 @@ block content .page-header h1 #{translate("register")} p - | Please contact - strong(ng-non-bindable) #{settings.adminEmail} + | Please contact + strong(ng-non-bindable) #{settings.adminEmail} | to create an account.