# HG changeset patch
# User neko259 <neko259@gmail.com>
# Date 2017-10-26 22:42:08
# Node ID 4c766e32d6572ccefb534e31c8fb66f18fb73da9
# Parent  1024ce380f991936d48a0ef127ac95b42fe6ad29

Rendered post should be considered safe

diff --git a/boards/templates/boards/all_threads.html b/boards/templates/boards/all_threads.html
--- a/boards/templates/boards/all_threads.html
+++ b/boards/templates/boards/all_threads.html
@@ -15,10 +15,10 @@
     {% endif %}
 
     {% if prev_page_link %}
-        <link rel="prev" href="{{ prev_page_link }}" />
+        <link rel="prev" href="{{ prev_page_link|safe }}" />
     {% endif %}
     {% if next_page_link %}
-        <link rel="next" href="{{ next_page_link }}" />
+        <link rel="next" href="{{ next_page_link|safe }}" />
     {% endif %}
 
 {% endblock %}
@@ -32,7 +32,7 @@
         <div class="post">
             <div class="title">{{ banner.title }}</div>
             <div>{{ banner.get_text|safe }}</div>
-            <div>{% trans 'Details' %}: <a href="{{ banner.post.get_absolute_url }}">>>{{ banner.post.id }}</a></div>
+            <div>{% trans 'Details' %}: <a href="{{ banner.post.get_absolute_url|safe }}">>>{{ banner.post.id }}</a></div>
         </div>
     {% endfor %}
 
@@ -41,8 +41,8 @@
         {% if random_image_post %}
             <div class="tag-image">
                 {% with image=random_image_post.get_first_image %}
-                    <a href="{{ random_image_post.get_absolute_url }}"><img 
-                        src="{{ image.get_thumb_url }}"
+                    <a href="{{ random_image_post.get_absolute_url|safe }}"><img
+                        src="{{ image.get_thumb_url|safe }}"
                         width="{{ image.get_preview_size.0 }}"
                         height="{{ image.get_preview_size.1 }}"
                         alt="{{ random_image_post.id }}"/></a>
diff --git a/boards/templates/boards/post.html b/boards/templates/boards/post.html
--- a/boards/templates/boards/post.html
+++ b/boards/templates/boards/post.html
@@ -3,6 +3,7 @@
 
 {% get_current_language as LANGUAGE_CODE %}
 
+{% autoescape off %}
 <div class="{{ css_class }}" id="{{ post.id }}" data-uid="{{ post.uid }}" {% if tree_depth %}style="margin-left: {{ tree_depth }}em;"{% endif %}>
     <div class="post-info">
         <a class="post_id" href="{{ post.get_absolute_url }}">#{{ post.id }}</a>
@@ -162,3 +163,4 @@
         </div>
     {% endif %}
 </div>
+{% endautoescape %}
\ No newline at end of file