Files
grecia/app/views/admin/newsletters/new.html.erb
Javi Martín 6b1864fbcd Sanitize translations instead of using _html
Using the `_html` suffix in an i18n key is the same as using `html_safe`
on it, which means that translation could potentially be used for XSS
attacks.
2019-10-09 19:46:47 +02:00

10 lines
294 B
Plaintext

<%= back_link_to %>
<h2><%= t("admin.newsletters.new.title") %></h2>
<p>
<%= sanitize(t("admin.newsletters.new.header_footer_help_text",
link: link_to(t("admin.newsletters.new.image_link"),
admin_site_customization_images_path))) %>
</p>
<%= render "form" %>