summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorEvgeny Fadeev <evgeny.fadeev@gmail.com>2011-06-17 19:32:05 -0400
committerEvgeny Fadeev <evgeny.fadeev@gmail.com>2011-06-17 19:32:05 -0400
commit19f18a8f599eae03bf73e404ab2ed7687ac9ff24 (patch)
tree3d449f198da1cf4b56d517ef7736a8927c9a6b6c
parentf721f09f9a5c69177d761019aab1700e7dd7497a (diff)
downloadaskbot-19f18a8f599eae03bf73e404ab2ed7687ac9ff24.tar.gz
askbot-19f18a8f599eae03bf73e404ab2ed7687ac9ff24.tar.bz2
askbot-19f18a8f599eae03bf73e404ab2ed7687ac9ff24.zip
striptagged and escaped the meta keywords injection from the question template
-rw-r--r--askbot/skins/default/templates/question.html2
1 files changed, 1 insertions, 1 deletions
diff --git a/askbot/skins/default/templates/question.html b/askbot/skins/default/templates/question.html
index b9f3edc5..4114865b 100644
--- a/askbot/skins/default/templates/question.html
+++ b/askbot/skins/default/templates/question.html
@@ -3,7 +3,7 @@
<!-- question.html -->
{% block title %}{% spaceless %}{{ question.get_question_title() }}{% endspaceless %}{% endblock %}
{% block meta_description %}
- <meta name="description" content="{{question.summary}}" />
+ <meta name="description" content="{{question.summary|striptags|escape}}" />
{% endblock %}
{% block keywords %}{{question.tagname_meta_generator()}}{% endblock %}
{% block forestyle %}