Using the `_html` suffix in an i18n key is the same as using `html_safe` on it, which means that translation could potentially be used for XSS attacks.
10 lines
294 B
Plaintext
10 lines
294 B
Plaintext
<%= back_link_to %>
|
|
<h2><%= t("admin.newsletters.new.title") %></h2>
|
|
<p>
|
|
<%= sanitize(t("admin.newsletters.new.header_footer_help_text",
|
|
link: link_to(t("admin.newsletters.new.image_link"),
|
|
admin_site_customization_images_path))) %>
|
|
</p>
|
|
|
|
<%= render "form" %>
|