Using the `_html` suffix in an i18n key is the same as using `html_safe` on it, which means that translation could potentially be used for XSS attacks.
25 lines
621 B
Plaintext
25 lines
621 B
Plaintext
<main>
|
|
<h2><%= t("management.proposals.index.title") %></h2>
|
|
|
|
<%= render "admin/shared/proposal_search", url: management_proposals_path %>
|
|
|
|
<div class="management-list">
|
|
<div class="proposals-list">
|
|
|
|
<div class="filters">
|
|
<% if @search_terms %>
|
|
<h3>
|
|
<%= page_entries_info @proposals %>
|
|
<%= sanitize(
|
|
t("proposals.index.search_results", count: @proposals.size, search_term: @search_terms)
|
|
) %>
|
|
</h3>
|
|
<% end %>
|
|
|
|
<%= render @proposals %>
|
|
<%= paginate @proposals %>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
</main>
|