Avoid html injection.

[invirt/packages/invirt-web.git] / code / templates / skeleton.tmpl

diff --git a/code/templates/skeleton.tmpl b/code/templates/skeleton.tmpl
index e68c819..d7855fb 100644 (file)
--- a/code/templates/skeleton.tmpl
+++ b/code/templates/skeleton.tmpl
@@ -59,7 +59,6 @@ function helppopup(name){
 <li><a href="help">Help</a></ul></li>
 </ul>
 #end if
-
 <div id="result" class="result">
 #if $varExists('result')
 $result
@@ -69,7 +68,9 @@ $result
 #if not $varExists('simple') or not $simple
 <h1>$title &mdash; SIPB Virtual Servers</h1>
 #end if
+#filter None
 $body
+#end filter
 #if not $varExists('simple') or not $simple
 <hr />
 Questions? Contact <a href="mailto:sipb-xen@mit.edu">sipb-xen@mit.edu</a>.