templates: Hopefully escape all template inputs
This commit is contained in:
@@ -3,20 +3,20 @@
|
||||
[% BLOCK renderNode %]
|
||||
<li>
|
||||
[% IF done.${node.path} %]
|
||||
<tt>[% node.name %]</tt> (<a href="#[% done.${node.path} %]"><em>repeated</em></a>)
|
||||
<tt>[% node.name | html %]</tt> (<a [% HTML.attributes(href => "#" _ done.${node.path}) %]><em>repeated</em></a>)
|
||||
[% ELSE %]
|
||||
[% done.${node.path} = global.nodeId; global.nodeId = global.nodeId + 1; %]
|
||||
[% IF node.refs.size > 0 %]
|
||||
<a href="javascript:" class="tree-toggle"></a>
|
||||
[% END %]
|
||||
<span id="[% done.${node.path} %]"><span class="dep-tree-line">
|
||||
<span [% HTML.attributes(id => done.${node.path}) %]><span class="dep-tree-line">
|
||||
[% IF node.buildStep %]
|
||||
<a [% HTML.attributes(href => c.uri_for('/build' node.buildStep.get_column('build'))) %]><tt>[% node.name %]</tt></a> [%
|
||||
IF buildStepLogExists(node.buildStep);
|
||||
INCLUDE renderLogLinks url=c.uri_for('/build' node.buildStep.get_column('build') 'nixlog' node.buildStep.stepnr);
|
||||
END %]
|
||||
[% ELSE %]
|
||||
<tt>[% node.name %]</tt> (<em>no info</em>)
|
||||
<tt>[% node.name | html %]</tt> (<em>no info</em>)
|
||||
[% END %]
|
||||
</span></span>
|
||||
[% IF isRoot %]
|
||||
|
Reference in New Issue
Block a user