mirror of
				https://github.com/valentineus/popov.link.git
				synced 2025-11-04 14:59:45 +03:00 
			
		
		
		
	Added security to the post template
Signed-off-by: Valentin Popov <valentineus@gmail.com>
This commit is contained in:
		@@ -2,11 +2,17 @@
 | 
				
			|||||||
layout: default
 | 
					layout: default
 | 
				
			||||||
---
 | 
					---
 | 
				
			||||||
 | 
					
 | 
				
			||||||
<!-- Content of the post -->
 | 
					 | 
				
			||||||
<div class="post">
 | 
					<div class="post">
 | 
				
			||||||
    <h1 class="post-title">{{ page.title }}</h1>
 | 
					    <!-- Header -->
 | 
				
			||||||
 | 
					    <h1 class="post-title">
 | 
				
			||||||
 | 
					        {{ page.title | smartify | strip_html | normalize_whitespace }}
 | 
				
			||||||
 | 
					    </h1>
 | 
				
			||||||
 | 
					
 | 
				
			||||||
 | 
					    <!-- Date -->
 | 
				
			||||||
    <span class="post-date">{{ page.date | date_to_long_string }}</span>
 | 
					    <span class="post-date">{{ page.date | date_to_long_string }}</span>
 | 
				
			||||||
    {{ content }}
 | 
					
 | 
				
			||||||
 | 
					    <!-- Contents -->
 | 
				
			||||||
 | 
					    {{ content | normalize_whitespace }}
 | 
				
			||||||
</div>
 | 
					</div>
 | 
				
			||||||
 | 
					
 | 
				
			||||||
<!-- Comments on the post -->
 | 
					<!-- Comments on the post -->
 | 
				
			||||||
@@ -14,9 +20,9 @@ layout: default
 | 
				
			|||||||
    <div id="disqus_thread"></div>
 | 
					    <div id="disqus_thread"></div>
 | 
				
			||||||
    <script type="text/javascript" defer>
 | 
					    <script type="text/javascript" defer>
 | 
				
			||||||
        var disqus_config = function() {
 | 
					        var disqus_config = function() {
 | 
				
			||||||
            this.page.identifier = '{{ page.url | relative_url }}';
 | 
					            this.page.identifier = '{{ page.id | slugify }}';
 | 
				
			||||||
            this.page.title = '{{ page.title }}';
 | 
					            this.page.title = '{{ page.title | smartify | strip_html | normalize_whitespace }}';
 | 
				
			||||||
            this.page.url = '{{ page.url | absolute_url }}';
 | 
					            this.page.url = '{{ page.url | absolute_url | uri_escape }}';
 | 
				
			||||||
        };
 | 
					        };
 | 
				
			||||||
 | 
					
 | 
				
			||||||
        (function() {
 | 
					        (function() {
 | 
				
			||||||
 
 | 
				
			|||||||
		Reference in New Issue
	
	Block a user