Removed an instance of 'autoescape off' for submitted meeting session comments in a template, since it is not needed in practice, in order to avoid an XSS injection opportunity.

levkowetz · levkowetz · commit eb88abc394fb · 2020-02-21T15:32:41.000Z
- Legacy-Id: 17322
diff --git a/ietf/secr/templates/includes/sessions_request_view.html b/ietf/secr/templates/includes/sessions_request_view.html
@@ -33,7 +33,5 @@
         <tr class="row1">
           <td>People who must be present:</td>
           <td>{% if session.bethere %}<ul>{% for person in session.bethere %}<li>{{ person }}</li>{% endfor %}</ul>{% else %}<i>None</i>{% endif %}</td>
-        {% autoescape off %}
         <tr class="row2"><td>Special Requests:</td><td>{{ session.comments }}</td></tr>
-        {% endautoescape %}
       </table>
