mirror of
https://github.com/GSA/notifications-admin.git
synced 2026-04-12 05:10:45 -04:00
c2472e55aa
the safe filter is quite dangerous - it allows HTML to be rendered as passed through (the default action is to escape all html), so should only be used with trusted input. Move it so we only apply it to fields we specifically expect to have HTML in - in this case, some tables contain links to other pages. Also, clean up the variable names for some of these info tables, as they didn't really make sense.