summaryrefslogtreecommitdiffstats
path: root/extensions/Voting/template/en/default/hook
diff options
context:
space:
mode:
authorDavid Lawrence <dlawrence@mozilla.com>2011-07-05 06:22:06 +0200
committerDavid Lawrence <dlawrence@mozilla.com>2011-07-05 06:22:06 +0200
commite658f6a3e6af7bbcc68d235a58f2294a47074ab6 (patch)
tree3a7bc188854d22c09856ca24aab534012a4cb3d7 /extensions/Voting/template/en/default/hook
parent937eda7dafb27a9c6df4d00f27954622ff90ca33 (diff)
downloadbugzilla-e658f6a3e6af7bbcc68d235a58f2294a47074ab6.tar.gz
bugzilla-e658f6a3e6af7bbcc68d235a58f2294a47074ab6.tar.xz
Bug 666695 - Voting Extension templates have unfiltered directives
r/a=mkanat
Diffstat (limited to 'extensions/Voting/template/en/default/hook')
-rw-r--r--extensions/Voting/template/en/default/hook/admin/users/confirm-delete-warn_safe.html.tmpl2
-rw-r--r--extensions/Voting/template/en/default/hook/bug/edit-after_importance.html.tmpl2
2 files changed, 2 insertions, 2 deletions
diff --git a/extensions/Voting/template/en/default/hook/admin/users/confirm-delete-warn_safe.html.tmpl b/extensions/Voting/template/en/default/hook/admin/users/confirm-delete-warn_safe.html.tmpl
index f799f1254..a753e3a66 100644
--- a/extensions/Voting/template/en/default/hook/admin/users/confirm-delete-warn_safe.html.tmpl
+++ b/extensions/Voting/template/en/default/hook/admin/users/confirm-delete-warn_safe.html.tmpl
@@ -24,7 +24,7 @@
[% IF votes == 1 %]
[%+ terms.abug %]
[% ELSE %]
- [%+ votes %] [%+ terms.bugs %]
+ [%+ votes FILTER html %] [%+ terms.bugs %]
[% END %].
If you delete the user account,
diff --git a/extensions/Voting/template/en/default/hook/bug/edit-after_importance.html.tmpl b/extensions/Voting/template/en/default/hook/bug/edit-after_importance.html.tmpl
index 4ad8f5bc2..f73ffaebd 100644
--- a/extensions/Voting/template/en/default/hook/bug/edit-after_importance.html.tmpl
+++ b/extensions/Voting/template/en/default/hook/bug/edit-after_importance.html.tmpl
@@ -23,7 +23,7 @@
with
<a href="page.cgi?id=voting/bug.html&amp;bug_id=
[%- bug.id FILTER uri %]">
- [%- bug.votes %]
+ [%- bug.votes FILTER html %]
[% IF bug.votes == 1 %]
vote
[% ELSE %]