Escape the error description on the sso_error template. (#8405)

clokep · web-flow · commit 31acc5c30938 · 2020-09-25T11:05:54.000-04:00
diff --git a/changelog.d/8405.feature b/changelog.d/8405.feature
@@ -0,0 +1 @@
+Consolidate the SSO error template across all configuration.
diff --git a/synapse/res/templates/sso_error.html b/synapse/res/templates/sso_error.html
@@ -12,7 +12,7 @@
     <p>
         There was an error during authentication:
     </p>
-    <div id="errormsg" style="margin:20px 80px">{{ error_description }}</div>
+    <div id="errormsg" style="margin:20px 80px">{{ error_description | e }}</div>
     <p>
         If you are seeing this page after clicking a link sent to you via email, make
         sure you only click the confirmation link once, and that you open the

Original file line number	Diff line number	Diff line change
`@@ -0,0 +1 @@`
	`1`	`+Consolidate the SSO error template across all configuration.`