i done a stupid with escaping - closes #41

tsumaru720 · Feb 23, 2020 · 413107d · 413107d
1 parent ab49a81
commit 413107d
Showing 1 changed file with 5 additions and 5 deletions.
diff --git a/themes/default/html/breakdown.html b/themes/default/html/breakdown.html
@@ -97,9 +97,9 @@
 	datasets: [
 	{% for dataset in log %}
 	{
-		label: '{{ dataset.name|raw }}',
-		backgroundColor: pastel_colour('{{ dataset.name|raw }}'),
-		borderColor: pastel_colour('{{ dataset.name|raw }}'),
+		label: '{{ dataset.name|escape('js') }}',
+		backgroundColor: pastel_colour('{{ dataset.name|escape('js') }}'),
+		borderColor: pastel_colour('{{ dataset.name|escape('js') }}'),
 		borderWidth: 1,
 		data: [
 			{% for data in dataset.data %}
@@ -151,7 +151,7 @@
 
 var labels = [
 {% for asset in mostRecent %}
-	'{{ asset.name|raw }}',
+	'{{ asset.name|escape('js') }}',
 {% endfor %}
 ];
 
@@ -160,7 +160,7 @@
 	datasets: [{
 		backgroundColor: [
 		{% for asset in mostRecent %}
-			pastel_colour('{{ asset.name|raw }}'),
+			pastel_colour('{{ asset.name|escape('js') }}'),
 		{% endfor %}
 		],
 		borderWidth: 1,