Files
grecia/app/views/management/proposals/index.html.erb
Javi Martín 6b1864fbcd Sanitize translations instead of using _html
Using the `_html` suffix in an i18n key is the same as using `html_safe`
on it, which means that translation could potentially be used for XSS
attacks.
2019-10-09 19:46:47 +02:00

25 lines
621 B
Plaintext

<main>
<h2><%= t("management.proposals.index.title") %></h2>
<%= render "admin/shared/proposal_search", url: management_proposals_path %>
<div class="management-list">
<div class="proposals-list">
<div class="filters">
<% if @search_terms %>
<h3>
<%= page_entries_info @proposals %>
<%= sanitize(
t("proposals.index.search_results", count: @proposals.size, search_term: @search_terms)
) %>
</h3>
<% end %>
<%= render @proposals %>
<%= paginate @proposals %>
</div>
</div>
</div>
</main>