Bugfix: Escaped HTML in messages and errors (#1890)

* assume flashed messages and errors are safe
This commit is contained in:
relativisticelectron 2022-09-19 15:12:08 +02:00 committed by GitHub
parent 62f823989d
commit 66d56a2c8e
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -91,12 +91,12 @@
{% with messages = get_flashed_messages(with_categories=True) %}
{% if messages %}
{% for category, message in messages | unique %}
<message-box type="{{ category }}">{{ message }}</message-box>
<message-box type="{{ category }}">{{ message | safe }}</message-box>
{% endfor %}
{% endif %}
{% endwith %}
{% if error %}
<message-box type="error">{{ _("ERROR:") }} {{error}}</message-box>
<message-box type="error">{{ _("ERROR:") }} {{error | safe }}</message-box>
{% endif %}
</div>