Fixed XSS vulnerability when displaying form error messages.

2026-10-18 05:51:26 +02:00 · 2023-10-17 15:25:45 +02:00
parent 23e4c25511
commit 6fdb077ca5
1 changed files with 2 additions and 2 deletions
@@ -12,7 +12,7 @@
    {% endif %}
  </label>
  {% endif %}
-  
+
  <div class="{% render_field_width field %}">
    {% if appended_text %}
    <div class="input-group">
@@ -31,7 +31,7 @@
    {% if field.errors %}
    <p class="help-block">
      {% for error in field.errors %}
-      {{ error|safe }}
+      {{ error }}
      {% endfor %}
    </p>
    {% endif %}