forked from enviPath/enviPy
liambrydon
34589efbde
## Changes - All text input fields are now cleaned with nh3 to remove html tags. We allow certain html tags under `settings.py/ALLOWED_HTML_TAGS` so we can easily update the tags we allow in the future. - All names and descriptions now use the template tag `nh_safe` in all html files. - Usernames and emails are a small exception and are not allowed any html tags Co-authored-by: Liam Brydon <62733830+MyCreativityOutlet@users.noreply.github.com> Co-authored-by: jebus <lorsbach@envipath.com> Co-authored-by: Tim Lorsbach <tim@lorsba.ch> Reviewed-on: enviPath/enviPy#171 Reviewed-by: jebus <lorsbach@envipath.com> Co-authored-by: liambrydon <lbry121@aucklanduni.ac.nz> Co-committed-by: liambrydon <lbry121@aucklanduni.ac.nz>
46 lines
1.7 KiB
HTML
46 lines
1.7 KiB
HTML
|
|
{% load static %}
|
|
<!-- Edit Reaction -->
|
|
<div id="edit_reaction_modal" class="modal" tabindex="-1">
|
|
<div class="modal-dialog">
|
|
<div class="modal-content">
|
|
<div class="modal-header">
|
|
<button type="button" class="close" data-dismiss="modal" aria-label="Close">
|
|
<span aria-hidden="true">×</span>
|
|
</button>
|
|
<h3 class="modal-title">Update Reaction</h3>
|
|
</div>
|
|
<div class="modal-body">
|
|
<form id="edit-reaction-modal-form" accept-charset="UTF-8" action="" data-remote="true" method="post">
|
|
{% csrf_token %}
|
|
<p>
|
|
<label for="reaction-name">Name</label>
|
|
<input id="reaction-name" class="form-control" name="reaction-name" value="{{ reaction.name|safe }}">
|
|
</p>
|
|
<p>
|
|
<label for="reaction-description">Description</label>
|
|
<input id="reaction-description" type="text" class="form-control"
|
|
value="{{ reaction.description|safe }}" name="reaction-description">
|
|
</p>
|
|
</form>
|
|
</div>
|
|
<div class="modal-footer">
|
|
<button type="button" class="btn btn-secondary" data-dismiss="modal">Close</button>
|
|
<button type="button" class="btn btn-primary" id="edit-reaction-modal-submit">Update</button>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
<script>
|
|
$(function() {
|
|
|
|
$('#edit-reaction-modal-submit').click(function(e){
|
|
e.preventDefault();
|
|
$('#edit-reaction-modal-form').submit();
|
|
});
|
|
|
|
});
|
|
|
|
|
|
</script>
|