From 9f93895bd40aad02e88f7ed7bfd954c930aa27db Mon Sep 17 00:00:00 2001
From: pushmatrix <daniel.beauchamp@gmail.com>
Date: Tue, 20 Aug 2013 15:35:10 +0200
Subject: [PATCH] Strip html by default in widgets. Users can disable this with
 the 'raw' filter. Closes #176

---
 templates/project/widgets/comments/comments.html | 2 +-
 templates/project/widgets/number/number.html     | 2 +-
 templates/project/widgets/text/text.html         | 4 ++--
 3 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/templates/project/widgets/comments/comments.html b/templates/project/widgets/comments/comments.html
index 898d2f66..7c580be1 100644
--- a/templates/project/widgets/comments/comments.html
+++ b/templates/project/widgets/comments/comments.html
@@ -4,4 +4,4 @@ <h3><img data-bind-src='current_comment.avatar'/><span data-bind='current_commen
   <p class="comment" data-bind='quote'></p>
 </div>
 
-<p class="more-info" data-bind="moreinfo | raw"></p>
+<p class="more-info" data-bind="moreinfo"></p>
diff --git a/templates/project/widgets/number/number.html b/templates/project/widgets/number/number.html
index 795a4694..c82e5f4a 100644
--- a/templates/project/widgets/number/number.html
+++ b/templates/project/widgets/number/number.html
@@ -6,6 +6,6 @@ <h2 class="value" data-bind="current | shortenedNumber | prepend prefix | append
   <i data-bind-class="arrow"></i><span data-bind="difference"></span>
 </p>
 
-<p class="more-info" data-bind="moreinfo | raw"></p>
+<p class="more-info" data-bind="moreinfo"></p>
 
 <p class="updated-at" data-bind="updatedAtMessage"></p>
diff --git a/templates/project/widgets/text/text.html b/templates/project/widgets/text/text.html
index 7aeb66d2..decd109d 100644
--- a/templates/project/widgets/text/text.html
+++ b/templates/project/widgets/text/text.html
@@ -1,7 +1,7 @@
 <h1 class="title" data-bind="title"></h1>
 
-<h3 data-bind="text | raw"></h3>
+<h3 data-bind="text"></h3>
 
-<p class="more-info" data-bind="moreinfo | raw"></p>
+<p class="more-info" data-bind="moreinfo"></p>
 
 <p class="updated-at" data-bind="updatedAtMessage"></p>