fix possible XSS in view issue page

10 years ago · 923873db85
parent 373731f5e8
commit 923873db85
1 changed files with 1 additions and 1 deletions
--- a/templates/repo/issue/view_content.tmpl
+++ b/templates/repo/issue/view_content.tmpl
@ -124,7 +124,7 @@

 	  		<div class="detail">
 	  			<span class="octicon octicon-git-commit"></span>
-	  			<span class="text grey">{{.Content | Safe}}</span>
+	  			<span class="text grey">{{.Content | Str2html}}</span>
 	  		</div>
  		</div>
 			{{end}}