ryg/royalnet
ryg/royalnet
1
Fork 0
mirror of https://github.com/RYGhub/royalnet.git synced 2024-11-24 03:54:20 +00:00
Code Activity

Escape correctly

Browse source
This commit is contained in:
Steffo 2018-07-21 19:47:16 +02:00
parent 4e825af92e
commit 563d07cdc5
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
webserver.py
View file

@ -176,7 +176,7 @@ def page_wiki(key: str):
db_session.close() db_session.close()
if wiki_page is None: if wiki_page is None:
return render_template("wiki.html", key=key) return render_template("wiki.html", key=key)
converted_md = Markup(markdown2.markdown(escape(wiki_page.content), converted_md = Markup(markdown2.markdown(wiki_page.content.replace("<", "&lt;"),
extras=["spoiler", "tables"])) extras=["spoiler", "tables"]))
return render_template("wiki.html", key=key, wiki_page=wiki_page, converted_md=converted_md, return render_template("wiki.html", key=key, wiki_page=wiki_page, converted_md=converted_md,
wiki_log=wiki_latest_edit) wiki_log=wiki_latest_edit)