mirror of
https://github.com/discourse/discourse.git
synced 2026-08-07 13:19:19 +08:00
e979ea4c07There was no security issue associated with this as it would require a very complex and almost impossible setup to exploit it, still, it's a cleaner pattern to escape the user provided value here.
9 lines
351 B
Text
Vendored
9 lines
351 B
Text
Vendored
<h1><%= t 'finish_installation.confirm_email.title' %></h1>
|
|
|
|
<%= raw(t 'finish_installation.confirm_email.message', email: h(@email)) %>
|
|
|
|
<div class='row'>
|
|
<%= button_to(finish_installation_resend_email_path, method: :put, class: 'wizard-container__button btn-primary') do %>
|
|
<%= t 'finish_installation.resend_email.title' %>
|
|
<% end %>
|
|
</div>
|
