From dd0f9f1bfc6a2ccbcd4c6209d6b2c2d4ce0a2bbd Mon Sep 17 00:00:00 2001 From: Andreas <andreasv@fsmpi.rwth-aachen.de> Date: Mon, 29 Jan 2018 21:16:48 +0100 Subject: [PATCH] have to use double escaping in tooltips --- templates/macros.html | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/templates/macros.html b/templates/macros.html index ef27010..d5724b5 100644 --- a/templates/macros.html +++ b/templates/macros.html @@ -298,7 +298,7 @@ $('#embedcodebtn').popover( {% macro moderator_editor (path,value,reload=false) %} {% if ismod() %} <span class="moderator_editor" data-path="{{path|join('.')}}" data-reload="{{ reload|int }}" > - <a class="moderator_editor_sign btn btn-default" title="{{path|join('.')}}{{ path|join('.')|getfielddescription }}{% for l in path|join('.')|getfieldchangelog %}<br>{% if (l.who != l.who|string) %}{{ l.name }} ({{ l.who }}){% else %}{{ l.who }}{%endif%} <{{ l.when }}>: {{ l.value_new|truncate(60)|forceescape }}{% endfor %}" data-toggle="tooltip" tabindex="0" style="padding: 3px; margin-right: 5px;"> + <a class="moderator_editor_sign btn btn-default" title="{{path|join('.')}}{{ path|join('.')|getfielddescription }}{% for l in path|join('.')|getfieldchangelog %}<br>{% if (l.who != l.who|string) %}{{ l.name }} ({{ l.who }}){% else %}{{ l.who }}{%endif%} <{{ l.when }}>: {{ l.value_new|truncate(60)|forceescape|forceescape }}{% endfor %}" data-toggle="tooltip" tabindex="0" style="padding: 3px; margin-right: 5px;"> <span class="glyphicon glyphicon-pencil"></span> </a> <span class="moderator_editor_value">{{ value|fixnl|safe }}</span> @@ -310,7 +310,7 @@ $('#embedcodebtn').popover( {% macro moderator_checkbox (path,value) %} {% if ismod() %} - <input title="{{path|join('.')}}{{ path|join('.')|getfielddescription }}{% for l in path|join('.')|getfieldchangelog %}<br>{% if (l.who != l.who|string) %}{{ l.name }} ({{ l.who }}){% else %}{{ l.who }}{%endif%} <{{ l.when }}>: {{ l.value_new|truncate(60)|forceescape }}{% endfor %}" data-toggle="tooltip" type="checkbox" data-path="{{path|join('.')}}" {% if value %} checked {% endif %} onchange="moderator.editor.changeboxclick(this)"/> + <input title="{{path|join('.')}}{{ path|join('.')|getfielddescription }}{% for l in path|join('.')|getfieldchangelog %}<br>{% if (l.who != l.who|string) %}{{ l.name }} ({{ l.who }}){% else %}{{ l.who }}{%endif%} <{{ l.when }}>: {{ l.value_new|truncate(60)|forceescape|forceescape }}{% endfor %}" data-toggle="tooltip" type="checkbox" data-path="{{path|join('.')}}" {% if value %} checked {% endif %} onchange="moderator.editor.changeboxclick(this)"/> {% endif %} {% endmacro %} -- GitLab