sanitize markdown: meh no trivial xss

2015-03-30 23:17:58 +01:00
parent 600206f50f
commit 3becc60721
8 changed files with 31 additions and 11 deletions
--- a/views/.layout.jade.swp
+++ b/views/.layout.jade.swp
--- a/views/edit.jade
+++ b/views/edit.jade
@@ -1,4 +1,5 @@
+include ./layout.jade
 h1= title
 form(method="post", action="/" + name)
  textarea(name="markdown")= markdown
-  input(type="submit")
+  input(type="submit")
--- a/views/layout.jade
+++ b/views/layout.jade
@@ -1,6 +1,6 @@
-!!!
+doctype html
 html
  head
    title= title
    link(rel='stylesheet', href='/stylesheets/style.css')
-  body!= body
+  body!= body
--- a/views/view.jade
+++ b/views/view.jade
@@ -1,3 +1,4 @@
+include ./layout.jade
 h1= title
 .article!= html
-a(href="/" + name + "/edit")= "Edit this Page"
+a(href="/" + name + "/edit")= "Edit this Page"