Escape the error description on the sso_error template. (#8405)

4 years ago · 31acc5c309
parent fec6f9ac17
commit 31acc5c309
2 changed files with 2 additions and 1 deletions
--- a/changelog.d/8405.feature
+++ b/changelog.d/8405.feature
@ -0,0 +1 @@
+Consolidate the SSO error template across all configuration.
--- a/synapse/res/templates/sso_error.html
+++ b/synapse/res/templates/sso_error.html
@ -12,7 +12,7 @@
    <p>
        There was an error during authentication:
    </p>
-    <div id="errormsg" style="margin:20px 80px">{{ error_description }}</div>
+    <div id="errormsg" style="margin:20px 80px">{{ error_description | e }}</div>
    <p>
        If you are seeing this page after clicking a link sent to you via email, make
        sure you only click the confirmation link once, and that you open the
				`@ -0,0 +1 @@`
				`Consolidate the SSO error template across all configuration.`