forked from enviPath/enviPy
liambrydon
34589efbde
## Changes - All text input fields are now cleaned with nh3 to remove html tags. We allow certain html tags under `settings.py/ALLOWED_HTML_TAGS` so we can easily update the tags we allow in the future. - All names and descriptions now use the template tag `nh_safe` in all html files. - Usernames and emails are a small exception and are not allowed any html tags Co-authored-by: Liam Brydon <62733830+MyCreativityOutlet@users.noreply.github.com> Co-authored-by: jebus <lorsbach@envipath.com> Co-authored-by: Tim Lorsbach <tim@lorsba.ch> Reviewed-on: enviPath/enviPy#171 Reviewed-by: jebus <lorsbach@envipath.com> Co-authored-by: liambrydon <lbry121@aucklanduni.ac.nz> Co-committed-by: liambrydon <lbry121@aucklanduni.ac.nz>
46 lines
1.8 KiB
HTML
46 lines
1.8 KiB
HTML
|
|
{% load static %}
|
|
<!-- Edit Package -->
|
|
<div id="edit_package_modal" class="modal" tabindex="-1">
|
|
<div class="modal-dialog">
|
|
<div class="modal-content">
|
|
<div class="modal-header">
|
|
<h5 class="modal-title">Update Package</h5>
|
|
<button type="button" class="close" data-dismiss="modal" aria-label="Close">
|
|
<span aria-hidden="true">×</span>
|
|
</button>
|
|
</div>
|
|
<div class="modal-body">
|
|
<p>Edit a Package.</p>
|
|
<form id="edit-package-modal-form" accept-charset="UTF-8" action="" data-remote="true" method="post">
|
|
{% csrf_token %}
|
|
<p>
|
|
<label for="package-name">Name</label>
|
|
<input id="package-name" class="form-control" name="package-name" value="{{ package.name|safe}}">
|
|
</p>
|
|
<p>
|
|
<label for="package-description">Description</label>
|
|
<input id="package-description" type="text" class="form-control"
|
|
value="{{ package.description|safe }}"
|
|
name="package-description">
|
|
</p>
|
|
</form>
|
|
</div>
|
|
<div class="modal-footer">
|
|
<button type="button" class="btn btn-secondary" data-dismiss="modal">Close</button>
|
|
<button type="button" class="btn btn-primary" id="edit-package-modal-submit">Update</button>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
<script>
|
|
$(function() {
|
|
|
|
$('#edit-package-modal-submit').click(function(e){
|
|
e.preventDefault();
|
|
$('#edit-package-modal-form').submit();
|
|
});
|
|
|
|
})
|
|
</script>
|