return mark_safe(f"<a href='{dataset_url}'>Test ERDDAP Timeseries</a>") # nosecformat_html escapes correctly and needs no # nosec waiver. Low risk (the URL comes from dataset_url(), built from model fields), but the waiver is what makes it worth removing — it's suppressing the tool that would catch a real instance later.
Sites: admin.py:112, :177
(from #1781)
format_htmlescapes correctly and needs no# nosecwaiver. Low risk (the URL comes fromdataset_url(), built from model fields), but the waiver is what makes it worth removing — it's suppressing the tool that would catch a real instance later.Sites:
admin.py:112,:177(from #1781)