I just noticed that the student.html template needs an update. Here's the few problems I could spot in:
- It doesn't specifies
<%page expression_filter="h"/>, which is needed for security
- It makes no use of
gettext for translation, which is weird since it does have a ## Translators: ... note
- It's in Mako and could be converted to Django templates
The lines below are related to the issue:
https://github.com/edx/xblock-lti-consumer/blob/2fd330f8a62bc2fcc4951d546db5ca4920a5c1ec/lti_consumer/templates/html/student.html#L1-L4
I just noticed that the
student.htmltemplate needs an update. Here's the few problems I could spot in:<%page expression_filter="h"/>, which is needed for securitygettextfor translation, which is weird since it does have a## Translators: ...noteThe lines below are related to the issue:
https://github.com/edx/xblock-lti-consumer/blob/2fd330f8a62bc2fcc4951d546db5ca4920a5c1ec/lti_consumer/templates/html/student.html#L1-L4