Archives/whoogle-search
2
0
Fork 0
mirror of https://github.com/benbusby/whoogle-search synced 2024-11-14 18:12:45 +00:00
Code Issues Packages Projects Releases Wiki Activity

Render error message w/o safe filter

Browse Source 
The error message shown in the error template does not need to be
rendered using the safe filter, and furthermore opens up an XSS
vulnerability.
This commit is contained in:
Ben Busby 2022-04-26 09:28:05 -06:00
parent d62ceb8423
commit abc30d7da3
No known key found for this signature in database
GPG Key ID: B9B7231E01D924A1
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
app/templates/error.html
View File

@ -16,7 +16,7 @@
<div>
<h1>Error</h1>
<p>
{{ error_message|safe }}
{{ error_message }}
</p>
<hr>
<p>