Files
grecia/app/views/management/users/show.html.erb
Javi Martín 6b1864fbcd Sanitize translations instead of using _html
Using the `_html` suffix in an i18n key is the same as using `html_safe`
on it, which means that translation could potentially be used for XSS
attacks.
2019-10-09 19:46:47 +02:00

12 lines
563 B
Plaintext

<% if @user.email.blank? %>
<p><%= sanitize(t("management.users.autogenerated_password", password: @user.password)) %></p>
<% else %>
<p><%= sanitize(t("management.users.create_user_success", email: @user.email)) %></p>
<% end %>
<%= render "management/user_permissions",
message: t("management.document_verifications.in_census_has_following_permissions"),
permissions: [:debates, :create_proposals, :support_proposals, :vote_proposals] %>
<a href="javascript:window.print();" class="button warning radius"><%= t("management.print_info") %></a>