From 1a371b894a80510241c5804a8fba43a744174716 Mon Sep 17 00:00:00 2001
From: Bryan Newbold <bnewbold@robocracy.org>
Date: Mon, 1 Apr 2019 20:48:34 -0700
Subject: allow HTML in flash messages (dangerous)

This change means we need to be careful constructing flash messages (not
allow user input in them).
---
 python/fatcat_web/templates/base.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'python/fatcat_web/templates/base.html')

diff --git a/python/fatcat_web/templates/base.html b/python/fatcat_web/templates/base.html
index d3353ca4..fcd7ccdf 100644
--- a/python/fatcat_web/templates/base.html
+++ b/python/fatcat_web/templates/base.html
@@ -84,7 +84,7 @@
     <div class="header">Now Hear This...</div>
     <ul class="list">
     {% for message in messages %}
-      <li>{{ message }}
+      <li>{{ message|safe }}
     {% endfor %}
     </ul>
     </div>
-- 
cgit v1.2.3