ChaoticByte/drinks-manager
1
1
Fork 0
Code Issues Pull requests Projects Releases 20 Packages Wiki Activity Actions

The application now correctly encodes the url query string for the profile-picture name (for security reasons), removed a left-over print-statement

Browse source
This commit is contained in:
W13R 2022-11-03 20:45:52 +01:00
parent 9f270c12b4
commit 1e32e2b5dd
3 changed files with 2 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

2
application/app/templates/userPanel.html
View file

@ -3,7 +3,7 @@
<div class="userPanel">
<div class="userInfo">
<img src="{{ '/profilepictures?name='|add:user.profile_picture_filename }}">
<img src="/profilepictures?name={{ user.profile_picture_filename|urlencode }}">
<span>
{% if user.first_name != "" %}
{% translate "User" %}: {{ user.first_name }} {{ user.last_name }} ({{ user.username }})