1
Fork 0
mirror of https://github.com/RYGhub/royalnet.git synced 2024-11-27 13:34:28 +00:00

Escape correctly

This commit is contained in:
Steffo 2018-07-21 19:47:16 +02:00
parent 4e825af92e
commit 563d07cdc5

View file

@ -176,7 +176,7 @@ def page_wiki(key: str):
db_session.close()
if wiki_page is None:
return render_template("wiki.html", key=key)
converted_md = Markup(markdown2.markdown(escape(wiki_page.content),
converted_md = Markup(markdown2.markdown(wiki_page.content.replace("<", "&lt;"),
extras=["spoiler", "tables"]))
return render_template("wiki.html", key=key, wiki_page=wiki_page, converted_md=converted_md,
wiki_log=wiki_latest_edit)