what if IP address contained bad characters? (highly local)

2016-05-06 16:53:28 +02:00
parent 3571670b98
commit 3f405b3484
2 changed files with 2 additions and 2 deletions
--- a/templates/mod/ban_form.html
+++ b/templates/mod/ban_form.html
@@ -21,7 +21,7 @@
 			</th>
 			<td>
 				{% if not hide_ip %}
-					<input type="text" name="ip" id="ip" size="30" maxlength="40" value="{{ ip }}">
+					<input type="text" name="ip" id="ip" size="30" maxlength="40" value="{{ ip|e }}">
 				{% else %}
 					<em>{% trans 'hidden' %}</em>
 				{% endif %}