From f8ba51f4b3079357d72e376342b7bf0d0492d82f Mon Sep 17 00:00:00 2001 From: Benjamin Bouvier Date: Thu, 30 Aug 2018 23:47:01 +0200 Subject: [PATCH] Fix error escaping; --- ihatemoney/templates/display_errors.html | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ihatemoney/templates/display_errors.html b/ihatemoney/templates/display_errors.html index 9e196058..265fa251 100644 --- a/ihatemoney/templates/display_errors.html +++ b/ihatemoney/templates/display_errors.html @@ -1,5 +1,5 @@ {% for field_name, field_errors in form.errors.items() if field_errors %} {% for error in field_errors %} -

{{ form[field_name].label.text }}: {{ error }}

+

{{ form[field_name].label.text }}: {{ error|escape }}

{% endfor %} {% endfor %}