6b1864fbcd
Using the `_html` suffix in an i18n key is the same as using `html_safe` on it, which means that translation could potentially be used for XSS attacks.
41 lines
1.5 KiB
Plaintext
41 lines
1.5 KiB
Plaintext
<% content_for :action_title, t("dashboard.poster.index.title") %>
|
|
<div class="row expanded">
|
|
<div class="small-12 medium-9 column dashboard-poster-preview">
|
|
<div class="preview-width show-for-large">
|
|
<div class="poster-header">
|
|
<h1>
|
|
<%= t("dashboard.poster.index.poster_title") %>
|
|
<br>
|
|
<%= image_tag("finger.png") %>
|
|
<%= t("dashboard.poster.index.poster_subtitle") %>
|
|
</h1>
|
|
<p class="intro">
|
|
<%= sanitize(t("dashboard.poster.index.intro_text", org: Setting["org_name"])) %>
|
|
</p>
|
|
|
|
<p class="text-center">
|
|
<strong><%= t("dashboard.poster.index.proposal_code", code: proposal.code) %></strong>
|
|
</p>
|
|
<div class="proposal-image">
|
|
<% if proposal.image.present? %>
|
|
<div class="overflow-image" style="background-image: url(<%= asset_url proposal.image.attachment.url(:large) %>);"></div>
|
|
<% else %>
|
|
<div class="overflow-image" style="background-image: url(<%= asset_url "default_mailing.jpg" %>);"></div>
|
|
<% end %>
|
|
</div>
|
|
<div class="poster-content">
|
|
<h2><%= t("dashboard.poster.index.support") %></h2>
|
|
<%= image_tag "quote_before_blue.png" %>
|
|
<h3><%= proposal.title %></h3>
|
|
<%= image_tag "quote_after_blue.png" %>
|
|
<p class="poster-footer">
|
|
<%= sanitize(t("dashboard.poster.index.footer", link: proposal_url(proposal))) %>
|
|
</p>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
|
|
<%= render "poster_options" %>
|
|
</div>
|