|
<meta property="og:description" content="{{lede|trim}}"> |
i am pretty sure this should be {{lede|trim|e}}, to avoid a problem which can be observed here: https://www.hacksoc.org/news/2014-01-20-bytemark-sponsorship.html
but i strongly suspect there are similar problems lurking elsewhere, since as far as i can tell jinja's autoescape feature is not enabled
we should probably enable autoescape and see what breaks, and/or audit all current uses of jinja interpolation
hacksoc.org/templates/base.html.jinja2
Line 28 in c83e30e
i am pretty sure this should be
{{lede|trim|e}}, to avoid a problem which can be observed here: https://www.hacksoc.org/news/2014-01-20-bytemark-sponsorship.htmlbut i strongly suspect there are similar problems lurking elsewhere, since as far as i can tell jinja's autoescape feature is not enabled
we should probably enable autoescape and see what breaks, and/or audit all current uses of jinja interpolation