[backport] fix issue #3094 - angular code xss in comments

stable
Juanfran 2015-07-22 14:56:36 +02:00
parent 4c8cfca692
commit 9799a24a27
1 changed files with 1 additions and 1 deletions

View File

@ -15,7 +15,7 @@ div(class!="activity-single <%- mode %>")
span(translate="COMMENTS.DELETED_INFO",
translate-values!="{ user: '<%- deleteCommentUser %>', date: '<%- deleteCommentDate %>'}")
<% } %>
.comment.wysiwyg
.comment.wysiwyg(ng-non-bindable)
| <%= comment %>
<% if (!deleteCommentDate && mode !== "activity" && canDeleteComment) { %>
a(href="", class="icon icon-delete comment-delete", data-activity-id!="<%- activityId %>")