Merge pull request #190 from edx/security-fix/fix-xss-date

Fix xss in date
mitocw · Jul 30, 2020 · 314fae8 · 314fae8
2 parents 6b0be2c + a006eef
commit 314fae8
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/lms/djangoapps/teams/static/teams/templates/date.underscore b/lms/djangoapps/teams/static/teams/templates/date.underscore
@@ -1 +1 @@
-<abbr title="<%= date %>"></abbr>
+<abbr title="<%- date %>"></abbr>