Fix #41 using Comments in a Gantry-powered theme did not escape the comment form token correctly

2017-01-09 10:12:23 +01:00 · 2017-01-09 10:12:23 +01:00 · 4e88431863
commit 4e88431863
parent fbf7ee0bc8
2 changed files with 9 additions and 1 deletions
--- a/templates/partials/comments.html.twig
+++ b/templates/partials/comments.html.twig
@ -35,7 +35,7 @@
        {% endfor %}
        </div>

-        {{ nonce_field('form', 'form-nonce') }}
+        {{ nonce_field('form', 'form-nonce')|raw }}
    </form>

    <div class="alert">{{ form.message }}</div>