From debe78030a7b3c217d39552667acd37edca74ec6 Mon Sep 17 00:00:00 2001 From: Henry Oswald Date: Fri, 17 Feb 2017 11:05:17 +0000 Subject: [PATCH] use html from jade as strings now fully html escaped --- services/web/app/views/project/editor/pdf.pug | 2 +- services/web/app/views/user/sessions.pug | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/web/app/views/project/editor/pdf.pug b/services/web/app/views/project/editor/pdf.pug index ba03f068a6..e75a2919b7 100644 --- a/services/web/app/views/project/editor/pdf.pug +++ b/services/web/app/views/project/editor/pdf.pug @@ -302,7 +302,7 @@ div.full-size.pdf(ng-controller="PdfController") .alert.alert-danger(ng-show="pdf.validation.conflictedPaths") div strong #{translate("conflicting_paths_found")} - div #{translate("following_paths_conflict")} + div !{translate("following_paths_conflict")} div li(ng-repeat="entry in pdf.validation.conflictedPaths") {{ '/'+entry['path'] }} diff --git a/services/web/app/views/user/sessions.pug b/services/web/app/views/user/sessions.pug index 948ed2d94f..c952daea03 100644 --- a/services/web/app/views/user/sessions.pug +++ b/services/web/app/views/user/sessions.pug @@ -17,7 +17,7 @@ block content div p.small - | #{translate("clear_sessions_description")} + | !{translate("clear_sessions_description")} div div(ng-if="state.otherSessions.length == 0")