diff --git a/app/assets/javascripts/projects/index.js b/app/assets/javascripts/projects/index.js index ea2a340b1..08b116154 100644 --- a/app/assets/javascripts/projects/index.js +++ b/app/assets/javascripts/projects/index.js @@ -476,7 +476,7 @@ var ProjectsIndex = (function() { data: { ...requestParams, ...{ page: 1 } }, success: function(data) { $('#breadcrumbsWrapper').html(data.breadcrumbs_html); - $(projectsWrapper).find('.projects-title').text(data.title); + $(projectsWrapper).find('.projects-title').html(data.title_html); $(toolbarWrapper).html(data.toolbar_html); viewContainer.data('projects-cards-url', data.projects_cards_url); viewContainer.removeClass('no-results'); diff --git a/app/controllers/experiments_controller.rb b/app/controllers/experiments_controller.rb index 301420503..5f1819ec0 100644 --- a/app/controllers/experiments_controller.rb +++ b/app/controllers/experiments_controller.rb @@ -296,11 +296,11 @@ class ExperimentsController < ApplicationController .select(:id, :name, :color) tags = tags.map do |tag| - { value: tag.id, label: sanitize_input(tag.name), params: { color: sanitize_input(tag.color) } } + { value: tag.id, label: escape_input(tag.name), params: { color: escape_input(tag.color) } } end if params[:query].present? && tags.select { |tag| tag[:label] == params[:query] }.blank? - tags << { value: 0, label: sanitize_input(params[:query]), params: { color: nil } } + tags << { value: 0, label: escape_input(params[:query]), params: { color: nil } } end render json: tags end @@ -358,12 +358,12 @@ class ExperimentsController < ApplicationController @experiment.workflowimg.purge render json: { message: t('experiments.table.modal_move_modules.success_flash', - experiment: sanitize_input(dst_experiment.name)) } + experiment: escape_input(dst_experiment.name)) } rescue StandardError => e Rails.logger.error(e.message) Rails.logger.error(e.backtrace.join("\n")) render json: { - message: t('experiments.table.modal_move_modules.error_flash', experiment: sanitize_input(dst_experiment.name)) + message: t('experiments.table.modal_move_modules.error_flash', experiment: escape_input(dst_experiment.name)) }, status: :unprocessable_entity raise ActiveRecord::Rollback end @@ -444,7 +444,7 @@ class ExperimentsController < ApplicationController def assigned_users_to_tasks users = current_team.users.where(id: @experiment.my_modules.joins(:user_my_modules).select(:user_id)) .search(false, params[:query]).map do |u| - { value: u.id, label: sanitize_input(u.name), params: { avatar_url: avatar_path(u, :icon_small) } } + { value: u.id, label: escape_input(u.name), params: { avatar_url: avatar_path(u, :icon_small) } } end render json: users, status: :ok diff --git a/app/controllers/my_module_tags_controller.rb b/app/controllers/my_module_tags_controller.rb index 0235505d5..e880b4bed 100644 --- a/app/controllers/my_module_tags_controller.rb +++ b/app/controllers/my_module_tags_controller.rb @@ -120,11 +120,11 @@ class MyModuleTagsController < ApplicationController .limit(6) tags = tags.map do |tag| - { value: tag.id, label: sanitize_input(tag.name), params: { color: sanitize_input(tag.color) } } + { value: tag.id, label: escape_input(tag.name), params: { color: escape_input(tag.color) } } end if params[:query].present? && tags.select { |tag| tag[:label] == params[:query] }.blank? - tags << { value: 0, label: sanitize_input(params[:query]), params: { color: nil } } + tags << { value: 0, label: escape_input(params[:query]), params: { color: nil } } end render json: tags diff --git a/app/controllers/projects_controller.rb b/app/controllers/projects_controller.rb index 9d9372e2b..a4586b5be 100644 --- a/app/controllers/projects_controller.rb +++ b/app/controllers/projects_controller.rb @@ -51,15 +51,15 @@ class ProjectsController < ApplicationController breadcrumbs_html = render_to_string(partial: 'projects/index/breadcrumbs.html.erb', locals: { target_folder: current_folder, folder_page: true }) projects_cards_url = project_folder_cards_url(current_folder) - title = if @inline_editable_title_config.present? - render_to_string(partial: 'shared/inline_editing', - locals: { - initial_value: current_folder&.name, - config: @inline_editable_title_config - }) - else - current_folder.name - end + title_html = if @inline_editable_title_config.present? + render_to_string(partial: 'shared/inline_editing', + locals: { + initial_value: current_folder&.name, + config: @inline_editable_title_config + }) + else + escape_input(current_folder.name) + end else breadcrumbs_html = '' projects_cards_url = cards_projects_url @@ -71,7 +71,7 @@ class ProjectsController < ApplicationController render json: { projects_cards_url: projects_cards_url, breadcrumbs_html: breadcrumbs_html, - title: title, + title_html: title_html, next_page: cards.next_page, toolbar_html: render_to_string(partial: 'projects/index/toolbar.html.erb'), cards_html: render_to_string( @@ -347,7 +347,7 @@ class ProjectsController < ApplicationController def users_filter users = current_team.users.search(false, params[:query]).map do |u| - { value: u.id, label: sanitize_input(u.name), params: { avatar_url: avatar_path(u, :icon_small) } } + { value: u.id, label: escape_input(u.name), params: { avatar_url: avatar_path(u, :icon_small) } } end render json: users, status: :ok diff --git a/app/controllers/protocols_controller.rb b/app/controllers/protocols_controller.rb index 97ce37c15..4cef8c8d8 100644 --- a/app/controllers/protocols_controller.rb +++ b/app/controllers/protocols_controller.rb @@ -696,18 +696,18 @@ class ProtocolsController < ApplicationController @db_json = {} @toolong = false @db_json['name'] = pio_eval_title_len( - sanitize_input(not_null(params['protocol']['name'])) + escape_input(not_null(params['protocol']['name'])) ) # since scinote only has description field, and protocols.io has many others # ,here i am putting everything important from protocols.io into description @db_json['authors'] = pio_eval_title_len( - sanitize_input(not_null(params['protocol']['authors'])) + escape_input(not_null(params['protocol']['authors'])) ) @db_json['created_at'] = pio_eval_title_len( - sanitize_input(not_null(params['protocol']['created_at'])) + escape_input(not_null(params['protocol']['created_at'])) ) @db_json['updated_at'] = pio_eval_title_len( - sanitize_input(not_null(params['protocol']['last_modified'])) + escape_input(not_null(params['protocol']['last_modified'])) ) @db_json['steps'] = {} diff --git a/app/controllers/repositories_controller.rb b/app/controllers/repositories_controller.rb index e68ec7dfd..796c4f07d 100644 --- a/app/controllers/repositories_controller.rb +++ b/app/controllers/repositories_controller.rb @@ -131,10 +131,8 @@ class RepositoriesController < ApplicationController if @repository.save log_activity(:create_inventory) - flash[:success] = t('repositories.index.modal_create.success_flash', - name: @repository.name) - render json: { url: repository_path(@repository) }, - status: :ok + flash[:success] = t('repositories.index.modal_create.success_flash_html', name: @repository.name) + render json: { url: repository_path(@repository) } else render json: @repository.errors, status: :unprocessable_entity @@ -455,7 +453,10 @@ class RepositoriesController < ApplicationController item_id: @repository.id, field_to_udpate: 'name', path_to_update: team_repository_path(@repository), - label_after: "#{inventory_shared_status_icon(@repository, current_team)}" + label_after: + sanitize_input( + "#{inventory_shared_status_icon(@repository, current_team)}" + ) } end diff --git a/app/controllers/user_my_modules_controller.rb b/app/controllers/user_my_modules_controller.rb index 37125a1c1..f77e94f5d 100644 --- a/app/controllers/user_my_modules_controller.rb +++ b/app/controllers/user_my_modules_controller.rb @@ -134,7 +134,7 @@ class UserMyModulesController < ApplicationController user_hash = { value: user.id, - label: sanitize_input(user.full_name), + label: escape_input(user.full_name), params: { avatar_url: avatar_path(user, :icon_small), designated: user.designated, diff --git a/app/datatables/label_template_datatable.rb b/app/datatables/label_template_datatable.rb index d050ff686..da9928ce0 100644 --- a/app/datatables/label_template_datatable.rb +++ b/app/datatables/label_template_datatable.rb @@ -36,11 +36,11 @@ class LabelTemplateDatatable < CustomDatatable '0' => record.id, '1' => record.default, '2' => append_format_icon(record), - '3' => sanitize_input(record.label_format), - '4' => sanitize_input(record.description), - '5' => sanitize_input(record.modified_by), + '3' => escape_input(record.label_format), + '4' => escape_input(record.description), + '5' => escape_input(record.modified_by), '6' => I18n.l(record.updated_at, format: :full), - '7' => sanitize_input(record.created_by_user), + '7' => escape_input(record.created_by_user), '8' => I18n.l(record.created_at, format: :full), 'recordInfoUrl' => '', 'DT_RowAttr': { @@ -60,7 +60,7 @@ class LabelTemplateDatatable < CustomDatatable "label_template_icons/#{record.icon}.svg", class: 'label-template-icon' ), - name: sanitize_input(record.name) + name: escape_input(record.name) } end diff --git a/app/datatables/protocols_datatable.rb b/app/datatables/protocols_datatable.rb index fbfebab74..55d22629c 100644 --- a/app/datatables/protocols_datatable.rb +++ b/app/datatables/protocols_datatable.rb @@ -185,7 +185,7 @@ class ProtocolsDatatable < CustomDatatable kws = record.protocol_keywords_str.split(", ") res = [] kws.sort_by{ |word| word.downcase }.each do |kw| - sanitized_kw = sanitize_input(kw) + sanitized_kw = escape_input(kw) res << "#{sanitized_kw}" end diff --git a/app/datatables/report_datatable.rb b/app/datatables/report_datatable.rb index c4ef21891..74f061134 100644 --- a/app/datatables/report_datatable.rb +++ b/app/datatables/report_datatable.rb @@ -56,13 +56,13 @@ class ReportDatatable < CustomDatatable records.map do |record| { '0' => record.id, - '1' => sanitize_input(record.project_name), - '2' => sanitize_input(record.name), - '3' => sanitize_input(record.code), + '1' => escape_input(record.project_name), + '2' => escape_input(record.name), + '3' => escape_input(record.code), '4' => pdf_file(record), '5' => docx_file(record), - '6' => sanitize_input(record.created_by_name), - '7' => sanitize_input(record.modified_by_name), + '6' => escape_input(record.created_by_name), + '7' => escape_input(record.modified_by_name), '8' => I18n.l(record.created_at, format: :full), '9' => I18n.l(record.updated_at, format: :full), 'archived' => record.project.archived?, diff --git a/app/helpers/application_helper.rb b/app/helpers/application_helper.rb index 039c1720a..2789e1c84 100644 --- a/app/helpers/application_helper.rb +++ b/app/helpers/application_helper.rb @@ -159,16 +159,16 @@ module ApplicationHelper thumb
- #{sanitize_input(user.full_name)}
+ #{escape_input(user.full_name)}
-

#{sanitize_input(user.email)}

) +

#{escape_input(user.email)}

) if user_still_in_team user_team_assignment = user.user_assignments.find_by(assignable: team) user_description += %(

#{I18n.t('atwho.users.popover_html', - role: sanitize_input(user_team_assignment.user_role.name.capitalize), - team: sanitize_input(user_team_assignment.assignable.name), + role: escape_input(user_team_assignment.user_role.name.capitalize), + team: escape_input(user_team_assignment.assignable.name), time: I18n.l(user_team_assignment.created_at, format: :full_date))}

) else @@ -190,7 +190,7 @@ module ApplicationHelper 'class="atwho-user-popover" data-container="body" ' \ 'data-html="true" tabindex="0" data-trigger="focus" ' \ 'data-placement="top" data-toggle="popover" data-content="') + - raw(user_description) + raw('" >') + sanitize_input(user.full_name) + raw('') + raw(user_description) + raw('" >') + escape_input(user.full_name) + raw('') html << " #{I18n.t('atwho.res.removed')}" unless skip_user_status || user_still_in_team "#{html}" diff --git a/app/helpers/input_sanitize_helper.rb b/app/helpers/input_sanitize_helper.rb index 2f1dd039a..0b0ddc7fe 100644 --- a/app/helpers/input_sanitize_helper.rb +++ b/app/helpers/input_sanitize_helper.rb @@ -4,7 +4,7 @@ require 'sanitize' module InputSanitizeHelper def sanitize_input(html, _tags = [], _attributes = []) - Sanitize.fragment(html, Constants::INPUT_SANITIZE_CONFIG) + Sanitize.fragment(html, Constants::INPUT_SANITIZE_CONFIG).html_safe end def escape_input(text) @@ -19,11 +19,11 @@ module InputSanitizeHelper preview_repository = options.fetch(:preview_repository, false) format_opt = wrapper_tag.merge(sanitize: false) base64_encoded_imgs = options.fetch(:base64_encoded_imgs, false) - text = sanitize_input(text, tags) text = simple_format(text, {}, format_opt) if simple_f if text =~ SmartAnnotations::TagToHtml::USER_REGEX || text =~ SmartAnnotations::TagToHtml::REGEX text = smart_annotation_parser(text, team, base64_encoded_imgs, preview_repository) end + text = sanitize_input(text, tags) auto_link( text, html: { target: '_blank' }, diff --git a/app/helpers/projects_helper.rb b/app/helpers/projects_helper.rb index 1fb5f6432..a24cfa5f4 100644 --- a/app/helpers/projects_helper.rb +++ b/app/helpers/projects_helper.rb @@ -18,7 +18,7 @@ module ProjectsHelper end def user_name_with_role(user_assignment) - "#{sanitize_input(user_assignment.user.name)} - #{user_assignment.user_role.name}" + "#{escape_input(user_assignment.user.name)} - #{escape_input(user_assignment.user_role.name)}" end def construct_module_connections(my_module) diff --git a/app/helpers/user_assignments_helper.rb b/app/helpers/user_assignments_helper.rb index be0731d3d..40cf45bab 100644 --- a/app/helpers/user_assignments_helper.rb +++ b/app/helpers/user_assignments_helper.rb @@ -7,7 +7,7 @@ module UserAssignmentsHelper else assignee.name end - sanitize_input(display_name) + escape_input(display_name) end def user_assignment_resource_role_name(user, resource, inherit = '') @@ -17,7 +17,7 @@ module UserAssignmentsHelper return user_assignment_resource_role_name(user, parent, '_inherit') end - "#{user_assignment.user_role.name} + "#{escape_input(user_assignment.user_role.name)} #{t("access_permissions.partials.#{resource.class.to_s.downcase}")} diff --git a/app/jobs/reports/docx_job.rb b/app/jobs/reports/docx_job.rb index ccd4b5d6b..893845ec9 100644 --- a/app/jobs/reports/docx_job.rb +++ b/app/jobs/reports/docx_job.rb @@ -26,8 +26,8 @@ module Reports type_of: :deliver_error, title: I18n.t('projects.reports.index.generation.error_docx_notification_title'), message: I18n.t('projects.reports.index.generation.error_notification_message', - report_link: "#{sanitize_input(report.name)}", - team_name: sanitize_input(report.team.name)) + report_link: "#{escape_input(report.name)}", + team_name: escape_input(report.team.name)) ) notification.create_user_notification(user) Rails.logger.error("Couldn't generate DOCX for Report with id: #{report.id}. Error:\n #{error}") @@ -49,8 +49,8 @@ module Reports type_of: :deliver, title: I18n.t('projects.reports.index.generation.completed_docx_notification_title'), message: I18n.t('projects.reports.index.generation.completed_notification_message', - report_link: "#{sanitize_input(report.name)}", - team_name: sanitize_input(report.team.name)) + report_link: "#{escape_input(report.name)}", + team_name: escape_input(report.team.name)) ) Reports::DocxPreviewJob.perform_now(report.id) diff --git a/app/jobs/reports/pdf_job.rb b/app/jobs/reports/pdf_job.rb index c83b280d2..2aa53a469 100644 --- a/app/jobs/reports/pdf_job.rb +++ b/app/jobs/reports/pdf_job.rb @@ -30,8 +30,8 @@ module Reports type_of: :deliver_error, title: I18n.t('projects.reports.index.generation.error_pdf_notification_title'), message: I18n.t('projects.reports.index.generation.error_notification_message', - report_link: "#{sanitize_input(report.name)}", - team_name: sanitize_input(report.team.name)) + report_link: "#{escape_input(report.name)}", + team_name: escape_input(report.team.name)) ) notification.create_user_notification(user) Rails.logger.error("Couldn't generate PDF for Report with id: #{report.id}. Error:\n #{error}") @@ -87,8 +87,8 @@ module Reports type_of: :deliver, title: I18n.t('projects.reports.index.generation.completed_pdf_notification_title'), message: I18n.t('projects.reports.index.generation.completed_notification_message', - report_link: "#{sanitize_input(report.name)}", - team_name: sanitize_input(report.team.name)) + report_link: "#{escape_input(report.name)}", + team_name: escape_input(report.team.name)) ) notification.create_user_notification(user) ensure diff --git a/app/serializers/label_printer_serializer.rb b/app/serializers/label_printer_serializer.rb index 254df19ea..3d361f8ab 100644 --- a/app/serializers/label_printer_serializer.rb +++ b/app/serializers/label_printer_serializer.rb @@ -12,7 +12,7 @@ class LabelPrinterSerializer < ActiveModel::Serializer end def display_name - object.description.present? ? sanitize_input("#{object.name} • #{object.description}") : sanitize_input(object.name) + object.description.present? ? escape_input("#{object.name} • #{object.description}") : escape_input(object.name) end def status diff --git a/app/services/experiments/table_view_service.rb b/app/services/experiments/table_view_service.rb index 3dba492e1..b0253928a 100644 --- a/app/services/experiments/table_view_service.rb +++ b/app/services/experiments/table_view_service.rb @@ -104,7 +104,7 @@ module Experiments def task_name_presenter(my_module) { id: my_module.id, - name: my_module.name, + name: escape_input(my_module.name), provisioning_status: my_module.provisioning_status, url: protocols_my_module_path(my_module) } @@ -148,8 +148,8 @@ module Experiments def status_presenter(my_module) { - name: my_module.my_module_status.name, - color: my_module.my_module_status.color + name: escape_input(my_module.my_module_status.name), + color: escape_input(my_module.my_module_status.color) } end diff --git a/app/views/experiments/_assigned_users.html.erb b/app/views/experiments/_assigned_users.html.erb index 249b36e5d..6684a8087 100644 --- a/app/views/experiments/_assigned_users.html.erb +++ b/app/views/experiments/_assigned_users.html.erb @@ -10,7 +10,7 @@ <% end %> <% if users.length > 4 %> - + +<%= users.length - 4 %> <% end %> diff --git a/app/views/my_modules/_tags.html.erb b/app/views/my_modules/_tags.html.erb index a752cc9fd..4a850de64 100644 --- a/app/views/my_modules/_tags.html.erb +++ b/app/views/my_modules/_tags.html.erb @@ -8,9 +8,9 @@ <%= select_tag "activity", options_for_select(my_module.tags.order(:id).map { |i| [ - i[:name], - i[:id], - {'data-params' => {color: i[:color]}.to_json} + escape_input(i[:name]), + escape_input(i[:id]), + {'data-params' => {color: escape_input(i[:color])}.to_json} ] }), { diff --git a/app/views/projects/index/_header.html.erb b/app/views/projects/index/_header.html.erb index cb449297a..ebd0bcbf7 100644 --- a/app/views/projects/index/_header.html.erb +++ b/app/views/projects/index/_header.html.erb @@ -7,7 +7,7 @@

<%= render partial: "shared/inline_editing", locals: { - initial_value: current_folder&.name, + initial_value: current_folder.name, config: @inline_editable_title_config } %>

diff --git a/app/views/projects/index/_users_list.html.erb b/app/views/projects/index/_users_list.html.erb index 3c7a7e296..f02ed9ca2 100644 --- a/app/views/projects/index/_users_list.html.erb +++ b/app/views/projects/index/_users_list.html.erb @@ -6,7 +6,7 @@ <% more_users = project.user_assignments[4..-1].to_a %> <% if more_users.any? %> - + +<%= more_users.size %> <% end %> diff --git a/app/views/shared/_inline_editing.html.erb b/app/views/shared/_inline_editing.html.erb index fe0257f33..004759798 100644 --- a/app/views/shared/_inline_editing.html.erb +++ b/app/views/shared/_inline_editing.html.erb @@ -5,7 +5,7 @@ data-item-id="<%= config[:item_id] %>" data-path-to-update="<%= config[:path_to_update] %>" data-original-name="<%= initial_value %>" - data-label-after='<%= config[:label_after]&.html_safe %>' + data-label-after='<%= config[:label_after] %>' data-placeholder='<%= config[:placeholder] %>' >
<%= initial_value %>
diff --git a/app/views/shared/smart_annotation/_experiment_items.html.erb b/app/views/shared/smart_annotation/_experiment_items.html.erb index a429285a3..c91c8c64a 100644 --- a/app/views/shared/smart_annotation/_experiment_items.html.erb +++ b/app/views/shared/smart_annotation/_experiment_items.html.erb @@ -7,7 +7,7 @@
<% experiment_group[:experiments].each do |experiment| %> -
  • +
  • Exp <%= experiment.name %>
    • diff --git a/app/views/shared/smart_annotation/_my_module_items.html.erb b/app/views/shared/smart_annotation/_my_module_items.html.erb index ea4a061c6..db49bacd0 100644 --- a/app/views/shared/smart_annotation/_my_module_items.html.erb +++ b/app/views/shared/smart_annotation/_my_module_items.html.erb @@ -9,7 +9,7 @@
    <% task_group[:tasks].each do |task| %> -
  • +
  • Tsk <%= task.name %>
    • diff --git a/app/views/shared/smart_annotation/_project_items.html.erb b/app/views/shared/smart_annotation/_project_items.html.erb index 0ca1ace56..ff6ea9f39 100644 --- a/app/views/shared/smart_annotation/_project_items.html.erb +++ b/app/views/shared/smart_annotation/_project_items.html.erb @@ -1,7 +1,7 @@ <% limit_reached = projects.length == Constants::ATWHO_SEARCH_LIMIT + 1 %>
    <% projects.limit(Constants::ATWHO_SEARCH_LIMIT).each do |project| %> -
  • +
  • Prj <%= project.name %>
    • diff --git a/app/views/shared/smart_annotation/_repository_items.html.erb b/app/views/shared/smart_annotation/_repository_items.html.erb index 7773dca16..ae40e198f 100644 --- a/app/views/shared/smart_annotation/_repository_items.html.erb +++ b/app/views/shared/smart_annotation/_repository_items.html.erb @@ -1,7 +1,7 @@ <% limit_reached = repository_rows.length == Constants::ATWHO_SEARCH_LIMIT + 1 %>
    <% repository_rows.take(Constants::ATWHO_SEARCH_LIMIT).each do |row| %> -
  • +
  • <%= row[:repository_tag] %> <%= row[:name] %>
    • diff --git a/app/views/shared/smart_annotation/_users.html.erb b/app/views/shared/smart_annotation/_users.html.erb index dff8db865..5034de624 100644 --- a/app/views/shared/smart_annotation/_users.html.erb +++ b/app/views/shared/smart_annotation/_users.html.erb @@ -5,7 +5,7 @@
    <% users.limit(Constants::ATWHO_SEARCH_LIMIT).each do |user| %> -
  • +
  • diff --git a/app/views/user_notifications/index.html.erb b/app/views/user_notifications/index.html.erb index 89d2b33f9..99929bb06 100644 --- a/app/views/user_notifications/index.html.erb +++ b/app/views/user_notifications/index.html.erb @@ -1,4 +1,4 @@ -<% provide(:head_title, sanitize_input(t("notifications.title"))) %> +<% provide(:head_title, t('notifications.title')) %>
    diff --git a/app/views/users/settings/teams/show.html.erb b/app/views/users/settings/teams/show.html.erb index f1a7e4b68..8ec22cfbe 100644 --- a/app/views/users/settings/teams/show.html.erb +++ b/app/views/users/settings/teams/show.html.erb @@ -63,17 +63,17 @@ data-field-to-update="description" data-params-group="team" data-path-to-update="<%= update_team_path(@team, format: :json) %>" - data-original-name="<%= sanitize_input(@team.description) %>" + data-original-name="<%= @team.description %>" > -
    "><%= sanitize_input(@team.description) %>
    - +
    "><%= @team.description %>
    +
    <%= t('general.cancel') %> <%= t('general.save') %>
    <% else %> - <%= @team.description.blank? ? t('users.settings.teams.edit.header_no_description') : sanitize_input(@team.description) %> + <%= @team.description.blank? ? t('users.settings.teams.edit.header_no_description') : @team.description %> <% end %>
    diff --git a/config/locales/en.yml b/config/locales/en.yml index 09c3565fa..e2486d8ce 100644 --- a/config/locales/en.yml +++ b/config/locales/en.yml @@ -1669,7 +1669,7 @@ en: name_label: "Inventory name" name_placeholder: "My inventory" submit: "Create" - success_flash: "Inventory %{name} successfully created." + success_flash_html: "Inventory %{name} successfully created." modal_share: title: "Share Inventory" submit: "Save sharing options" @@ -2799,7 +2799,7 @@ en: new_step: "New step" subtitle: "Protocol Steps" no_steps: "Protocol has no steps." - published_on: "Published on %{timestamp} by %{user}" + published_on_html: "Published on %{timestamp} by %{user}" info_tab: "Info" comments_tab: "Comments" no_description: "This step has no description."