1
0
mirror of https://github.com/haiwen/seahub.git synced 2025-07-12 06:29:23 +00:00

Escape group name in notice

This commit is contained in:
zhengxie 2016-06-06 14:48:01 +08:00
parent 390c04ec99
commit 03a032ff1e

View File

@ -567,7 +567,8 @@ class UserNotification(models.Model):
msg = _(u"%(user)s posted a new discussion in <a href='%(href)s'>%(group_name)s</a>.") % {
'href': reverse('group_discuss', args=[group.id]),
'user': escape(email2nickname(msg_from)),
'group_name': group.group_name}
'group_name': escape(group.group_name)
}
return msg
def format_group_message_detail(self):
@ -613,7 +614,7 @@ class UserNotification(models.Model):
'user_profile': reverse('user_profile', args=[username]),
'username': username,
'href': reverse('group_members', args=[group_id]),
'group_name': group.group_name,
'group_name': escape(group.group_name),
'join_request_msg': escape(join_request_msg),
}
return msg
@ -642,8 +643,7 @@ class UserNotification(models.Model):
'user_profile': reverse('user_profile', args=[group_staff]),
'group_staff': group_staff,
'href': reverse('group_info', args=[group_id]),
'group_name': group.group_name,
}
'group_name': escape(group.group_name)}
return msg
########## handle signals