mirror of
https://github.com/discourse/discourse.git
synced 2026-08-08 17:53:55 +08:00
e979ea4c07There was no security issue associated with this as it would require a very complex and almost impossible setup to exploit it, still, it's a cleaner pattern to escape the user provided value here.
3 lines
135 B
Text
Vendored
3 lines
135 B
Text
Vendored
<h1><%= t 'finish_installation.resend_email.title' %></h1>
|
|
|
|
<%= raw(t 'finish_installation.resend_email.message', email: h(@email)) %>
|
