fix: remove str2html from org full name (#1360)

* fix: remove str2html for security issue. * fix: update
go-gitea · Apr 6, 2017 · 0cee52e · 0cee52e
1 parent e7493e9
commit 0cee52e
Show file tree

Hide file tree

Showing 5 changed files with 5 additions and 5 deletions.
diff --git a/templates/org/header.tmpl b/templates/org/header.tmpl
@@ -4,7 +4,7 @@
 			<div class="column">
 				<div class="ui header">
 					<img class="ui image" src="{{.RelAvatarLink}}?s=100">
-					<span class="text thin grey"><a href="{{.HomeLink}}">{{.DisplayName | Str2html}}</a></span>
+					<span class="text thin grey"><a href="{{.HomeLink}}">{{.DisplayName}}</a></span>
 
 					<div class="ui right">
 						<div class="ui menu">

diff --git a/templates/org/home.tmpl b/templates/org/home.tmpl
@@ -6,7 +6,7 @@
 				<img class="ui left" id="org-avatar" src="{{.Org.RelAvatarLink}}?s=140"/>
 				<div id="org-info">
 					<div class="ui header">
-						{{.Org.DisplayName | Str2html}}
+						{{.Org.DisplayName}}
 						{{if .IsOrganizationOwner}}<a class="text grey" href="{{.OrgLink}}/settings"><span class="octicon octicon-gear"></span></a>{{end}}
 					</div>
 					{{if .Org.Description}}<p class="desc">{{.Org.Description}}</p>{{end}}

diff --git a/templates/org/member/invite.tmpl b/templates/org/member/invite.tmpl
@@ -4,7 +4,7 @@
 	<div class="ui container">
 		<div id="invite-box">
 			{{template "base/alert" .}}
-			<h2>{{.i18n.Tr "org.members.invite_desc" .Org.DisplayName | Str2html}}</h2>
+			<h2>{{.i18n.Tr "org.members.invite_desc" .Org.DisplayName}}</h2>
 			<form class="ui form" action="{{.Link}}" method="post">
 				{{.CsrfTokenHtml}}
 				<div class="inline field ui left">

diff --git a/templates/org/settings/options.tmpl b/templates/org/settings/options.tmpl
@@ -18,7 +18,7 @@
 						</div>
 						<div class="field {{if .Err_FullName}}error{{end}}">
 							<label for="full_name">{{.i18n.Tr "org.org_full_name_holder"}}</label>
-							<input id="full_name" name="full_name" value="{{.Org.FullName | Str2html}}">
+							<input id="full_name" name="full_name" value="{{.Org.FullName}}">
 						</div>
 						<div class="field {{if .Err_Description}}error{{end}}">
 							<label for="description">{{$.i18n.Tr "org.org_desc"}}</label>

diff --git a/templates/org/team/members.tmpl b/templates/org/team/members.tmpl
@@ -17,7 +17,7 @@
 							{{end}}
 							<a href="{{.HomeLink}}">
 								<img class="ui avatar image" src="{{.RelAvatarLink}}">
-								{{.DisplayName | Str2html}}
+								{{.DisplayName}}
 							</a>
 						</div>
 					{{end}}