diff options
author | Étienne Loks <etienne.loks@iggdrasil.net> | 2016-09-08 10:50:58 +0200 |
---|---|---|
committer | Étienne Loks <etienne.loks@iggdrasil.net> | 2016-09-08 10:50:58 +0200 |
commit | 3a3b4a0acc0f4fdafca161366dcafe2ce962d486 (patch) | |
tree | dc461d9a3a9a18f7e6683eb4cdf0088810c63972 | |
parent | 031e806212ed489f81536103fb7c28e177fb7322 (diff) | |
download | Ishtar-3a3b4a0acc0f4fdafca161366dcafe2ce962d486.tar.bz2 Ishtar-3a3b4a0acc0f4fdafca161366dcafe2ce962d486.zip |
New item window: unsafe the label (refs #3190)
-rw-r--r-- | ishtar_common/templates/window.html | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/ishtar_common/templates/window.html b/ishtar_common/templates/window.html index 8e8eac41e..0748cd4cd 100644 --- a/ishtar_common/templates/window.html +++ b/ishtar_common/templates/window.html @@ -23,7 +23,7 @@ <body> {% if new_item_label %} <script type='text/javascript' language='javascript'> -save_and_close_window{% if many %}_many{% endif %}("{{parent_name}}", "{{parent_pk}}", "{{new_item_label}}", "{{new_item_pk}}"); +save_and_close_window{% if many %}_many{% endif %}("{{parent_name}}", "{{parent_pk}}", "{{new_item_label|safe}}", "{{new_item_pk}}"); </script> {% endif %} <div id="window_content"> |