user01/calibre-web
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge remote-tracking branch 'fix/commentxss' into Develop

Browse Source
This commit is contained in:
Ozzie Isaacs
2026-05-09 10:30:59 +02:00
parent 888ab4dc8f 42dc36cc10
commit 6cbba6d170
3 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
cps/templates/detail.html
+1 -1
View File
@@ -232,7 +232,7 @@
{% elif c.datatype == 'datetime' %} {% elif c.datatype == 'datetime' %}
{{ column.value|formatdate }} {{ column.value|formatdate }}
{% elif c.datatype == 'comments' %} {% elif c.datatype == 'comments' %}
{{ column.value|safe }} {{ column.value|clean_string|safe }}
{% elif c.datatype == 'series' %} {% elif c.datatype == 'series' %}
{{ '%s [%s]' % (column.value, column.extra|formatfloat(2)) }} {{ '%s [%s]' % (column.value, column.extra|formatfloat(2)) }}
{% elif c.datatype == 'text' %} {% elif c.datatype == 'text' %}
cps/templates/feed.xml
+1 -1
View File
@@ -94,7 +94,7 @@
{% elif c.datatype == 'datetime' %} {% elif c.datatype == 'datetime' %}
{{ column.value|formatdate }} {{ column.value|formatdate }}
{% elif c.datatype == 'comments' %} {% elif c.datatype == 'comments' %}
{{ column.value|safe }} {{ column.value|clean_string|safe }}
{% elif c.datatype == 'series' %} {% elif c.datatype == 'series' %}
{{ '%s [%s]' % (column.value, column.extra|formatfloat(2)) }} {{ '%s [%s]' % (column.value, column.extra|formatfloat(2)) }}
{% elif c.datatype == 'text' %} {% elif c.datatype == 'text' %}
cps/templates/listenmp3.html
+1 -1
View File
@@ -134,7 +134,7 @@
{% elif c.datatype == 'datetime' %} {% elif c.datatype == 'datetime' %}
{{ column.value|formatdate }} {{ column.value|formatdate }}
{% elif c.datatype == 'comments' %} {% elif c.datatype == 'comments' %}
{{column.value|safe}} {{column.value|clean_string|safe}}
{% elif c.datatype == 'series' %} {% elif c.datatype == 'series' %}
{{ '%s [%s]' % (column.value, column.extra|formatfloat(2)) }} {{ '%s [%s]' % (column.value, column.extra|formatfloat(2)) }}
{% elif c.datatype == 'text' %} {% elif c.datatype == 'text' %}