Add a few more template html escapes

package-health · Nov 28, 2022 · 0503316 · 0503316
1 parent 0cc0d8e
commit 0503316
Show file tree

Hide file tree

Showing 3 changed files with 4 additions and 4 deletions.
diff --git a/resources/views/package/listVersions.twig b/resources/views/package/listVersions.twig
@@ -2,7 +2,7 @@
 
 {% block title %}Releases of "{{ package.name }}" - PHP.Package.Health{% endblock %}
 
-{% block description %}List of {{ tagged | length }} tagged releases and {{  develop | length }} development branches of package {{ package.name }}{% endblock %}
+{% block description %}List of {{ tagged | length }} tagged releases and {{ develop | length }} development branches of package {{ package.name }}{% endblock %}
 
 {% block hero_type %}is-info{% endblock %}
 

diff --git a/resources/views/package/viewVersion.twig b/resources/views/package/viewVersion.twig
@@ -51,7 +51,7 @@
             {% else %}
               <td><a href="{{ url_for('redirectPackageVersion', {vendor: dep.package.vendor, project: dep.package.project}) }}">{{ dep.package.name }}</a></td>
             {% endif %}
-            <td class="has-text-grey">{{ dep.package.description }}</td>
+            <td class="has-text-grey">{{ dep.package.description | escape }}</td>
             <td class="has-text-right"><code>{{ dep.requiredVersion }}</code></td>
             <td class="has-text-right"><code>{{ dep.package.latestVersion }}</code></td>
             <td class="has-text-right"><span class="tag {{ dep.status.type }}">{{ dep.status.text }}</span></td>
@@ -85,7 +85,7 @@
             {% else %}
               <td><a href="{{ url_for('redirectPackageVersion', {vendor: dep.package.vendor, project: dep.package.project}) }}">{{ dep.package.name }}</a></td>
             {% endif %}
-            <td class="has-text-grey">{{ dep.package.description }}</td>
+            <td class="has-text-grey">{{ dep.package.description | escape }}</td>
             <td class="has-text-right"><code>{{ dep.requiredVersion }}</code></td>
             <td class="has-text-right"><code>{{ dep.package.latestVersion }}</code></td>
             <td class="has-text-right"><span class="tag {{ dep.status.type }}">{{ dep.status.text }}</span></td>

diff --git a/resources/views/vendor/listPackages.twig b/resources/views/vendor/listPackages.twig
@@ -23,7 +23,7 @@
       {% for package in packages %}
         <tr>
           <td><a href="{{ url_for('redirectPackageVersion', {vendor: package.vendor, project: package.project}) }}">{{ package.name }}</a></td>
-          <td class="has-text-grey">{{ package.description }}</td>
+          <td class="has-text-grey">{{ package.description | escape }}</td>
           <td class="has-text-right"><img src="{{ url_for('redirectPackageBadge', {vendor: package.vendor, project: package.project}) }}" height="20" alt="Dependency Badge" decoding="async" role="img"></td>
         </tr>
       {% endfor %}