From e7f20e90fbce124079e15b793bc3dfd52dbd2368 Mon Sep 17 00:00:00 2001
From: Sebastian Silva <sebastian@somosazucar.org>
Date: Mon, 10 Jun 2013 03:12:46 +0000
Subject: security-issue-1-reported-by-ignacio

---
diff --git a/sugar_network_webui/templates/_context-article-view.html b/sugar_network_webui/templates/_context-article-view.html
index 565193a..33f2df0 100644
--- a/sugar_network_webui/templates/_context-article-view.html
+++ b/sugar_network_webui/templates/_context-article-view.html
@@ -13,13 +13,13 @@
                 <br/>
                 <article>
                 <div class="resource-title">
-                    {{context['title']|safe}}
+                    {{context['title']}}
                 </div>
                 <div class="resource-summary">
-                    {{context['summary']|safe}}
+                    {{context['summary']}}
                 </div>
                 <div>
-                    <pre>{{context['description']|safe}}</pre>
+                    <pre>{{context['description']}}</pre>
                 </div>
                 <div>
                 </article>
diff --git a/sugar_network_webui/templates/_context-artifact-list.html b/sugar_network_webui/templates/_context-artifact-list.html
index 4538901..ca79cf1 100644
--- a/sugar_network_webui/templates/_context-artifact-list.html
+++ b/sugar_network_webui/templates/_context-artifact-list.html
@@ -27,12 +27,12 @@
                         <a href="/artifacts/download/{{item['guid']}}"
                             class="artifact-link"
                             data-href="/artifacts/download/{{item['guid']}}">
-                        {{item['title']|safe}}</a>
+                        {{item['title']}}</a>
                         </div>
                         <div class="resource-context-row">
                         <a href="/artifacts/download/{{item['guid']}}"
                             data-href="/artifacts/download/{{item['guid']}}">
-                        {{item['description']|safe}}
+                        {{item['description']}}
                         </a>
                         </div>
                         <div class="mtime">
diff --git a/sugar_network_webui/templates/_context-resource-list.html b/sugar_network_webui/templates/_context-resource-list.html
index 76d49ed..b693408 100644
--- a/sugar_network_webui/templates/_context-resource-list.html
+++ b/sugar_network_webui/templates/_context-resource-list.html
@@ -27,12 +27,12 @@
                         <a href="/{{item['type']|special_str}}/{{item['guid']}}"
                             class="solution-link"
                             data-href="/{{item['type']|special_str}}/{{item['guid']}}">
-                        {{item['title']|safe}}</a>
+                        {{item['title']}}</a>
                         </div>
                         <div class="resource-context-row">
                         <a href="/{{item['type']|special_str}}/{{item['guid']}}"
                             data-href="/{{item['type']|special_str}}/{{item['guid']}}">
-                        {{item['content']|safe}}
+                        {{item['content']}}
                         </a>
                         </div>
                         <div class="mtime">
diff --git a/sugar_network_webui/templates/_context-solution-list.html b/sugar_network_webui/templates/_context-solution-list.html
index 7703c20..086f62b 100644
--- a/sugar_network_webui/templates/_context-solution-list.html
+++ b/sugar_network_webui/templates/_context-solution-list.html
@@ -6,10 +6,10 @@
                     </div>
                     <div class="resource-header-column">
                         <div class="resource-title">
-                        {{resource['title']|safe}}
+                        {{resource['title']}}
                         </div>
                         <div class="resource-content">
-                        <pre>{{resource['content']|safe}}</pre>
+                        <pre>{{resource['content']}}</pre>
                         </div>
                         <div class='mtime'>
                         {% if (session['connected'] or False) %}
@@ -63,7 +63,7 @@
                     <div class="solution-content-column">
                         <img class="watermark" src="/static/icons/dialog-ok.png"/>
                         <div class="resource-content">
-                        {{item['content']|safe}}
+                        {{item['content']}}
                         </div>
                         <div class='mtime'>
                         {% if (session['connected'] or False) %}
--
cgit v0.9.1