Escape HTML (#366)

2025-06-29 02:10:36 +02:00 · 2020-09-15 01:02:57 +09:00
parent 49e29a5751
commit e3c6a1ec07
3 changed files with 10 additions and 3 deletions
--- a/todo/templates/index.html.tera
+++ b/todo/templates/index.html.tera
@ -52,7 +52,7 @@
              {% else %}
                <form action="/todo/{{task.id}}" class="link" method="post">
                  <input type="hidden" name="_method" value="put" />
-                  <button type="submit" class="link">{{ task.description }}</button>
+                  <button type="submit" class="link">{{task.description}}</button>
                </form>
              {% endif %}
            </li>