Skip to content

Commit 553b89b

Browse files
committed
Do not escape org name twice
If the entry is escaped, we'd need to mark every use of it in the templates as `| safe` which is more dubious than not escaping the database entry in the first place. Fixes #6357
1 parent 4623ec9 commit 553b89b

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

securedrop/journalist_app/admin.py

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -132,7 +132,7 @@ def update_org_name() -> Union[str, werkzeug.Response]:
132132
if form.validate_on_submit():
133133
try:
134134
value = request.form["organization_name"]
135-
InstanceConfig.set_organization_name(escape(value, quote=True))
135+
InstanceConfig.set_organization_name(value)
136136
flash(gettext("Preferences saved."), "org-name-success")
137137
except Exception:
138138
flash(gettext("Failed to update organization name."), "org-name-error")

0 commit comments

Comments
 (0)