diff options
| author | rr- <rr-@sakuya.pl> | 2016-06-23 11:41:52 +0200 |
|---|---|---|
| committer | rr- <rr-@sakuya.pl> | 2016-06-23 12:47:56 +0200 |
| commit | 6ea129a9ef629d89b03d925925c0704d8eec586f (patch) | |
| tree | c3c91c9a9f7c70c02176f529352909be02bea344 /client/html/posts_header.tpl | |
| parent | b957f3ae36da402ad4d9ac23563aa3975f9659f3 (diff) | |
client/views: escape HTML
This lets client use < > in tag names.
Diffstat (limited to 'client/html/posts_header.tpl')
| -rw-r--r-- | client/html/posts_header.tpl | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/client/html/posts_header.tpl b/client/html/posts_header.tpl index 28cf430..3940488 100644 --- a/client/html/posts_header.tpl +++ b/client/html/posts_header.tpl @@ -9,9 +9,9 @@ </div> <div class='buttons'> <input class='mousetrap' type='submit' value='Search'/> - <input data-safety=safe type='button' class='mousetrap safety safety-safe <%= ctx.settings.listPosts.safe ? '' : 'disabled' %>'/> - <input data-safety=sketchy type='button' class='mousetrap safety safety-sketchy <%= ctx.settings.listPosts.sketchy ? '' : 'disabled' %>'/> - <input data-safety=unsafe type='button' class='mousetrap safety safety-unsafe <%= ctx.settings.listPosts.unsafe ? '' : 'disabled' %>'/> + <input data-safety=safe type='button' class='mousetrap safety safety-safe <%- ctx.settings.listPosts.safe ? '' : 'disabled' %>'/> + <input data-safety=sketchy type='button' class='mousetrap safety safety-sketchy <%- ctx.settings.listPosts.sketchy ? '' : 'disabled' %>'/> + <input data-safety=unsafe type='button' class='mousetrap safety safety-unsafe <%- ctx.settings.listPosts.unsafe ? '' : 'disabled' %>'/> <a class='mousetrap button append' href='/help/search/posts'>Syntax help</a> </div> </form> |