Escape form values with markupsafe

kakwa / ldapcherry

Web UI for managing users and groups in multiple directory services.

MIT License

225 stars 70 forks source link

Escape form values with markupsafe #17

Closed jthiltges closed 5 years ago

jthiltges commented 5 years ago

Use markupsafe to format HTML fragments
Correct the formatting problems introduced with the XSS fixes in #16

coveralls commented 5 years ago

Coverage remained the same at ?% when pulling c6cce54d5f2496b686a7102306c9e8c08859a078 on jthiltges:escfix into 1f79648d5739e6f604b40daec4c19ca706b64a46 on kakwa:master.