refactor: document content|safe safety invariant in templates

Add comments explaining why the |safe filter is used in data.html and
stats.html — content is always pre-rendered HTML from render_template().
This commit is contained in:
Jon Seager 2026-02-13 15:11:36 +00:00
parent 31cb7c6c71
commit 36e2d90ee8
No known key found for this signature in database
2 changed files with 2 additions and 0 deletions

View file

@ -20,6 +20,7 @@
/> />
</div> </div>
{# Safety: content is always pre-rendered from another Askama template via render_template() #}
<div id="data-content" class="data-page-content">{{ content|safe }}</div> <div id="data-content" class="data-page-content">{{ content|safe }}</div>
</div> </div>

View file

@ -27,6 +27,7 @@
<div class="flex flex-col gap-6"> <div class="flex flex-col gap-6">
{% include "partials/tab_bar.html" %} {% include "partials/tab_bar.html" %}
{# Safety: content is always pre-rendered from another Askama template via render_template() #}
<div id="stats-content">{{ content|safe }}</div> <div id="stats-content">{{ content|safe }}</div>
</div> </div>