fix: mark intentional raw HTML as safe

Author: holysoles

templates/modal.html.j2

@@ -1,7 +1,7 @@
 <div id="{{ modal.id }}" class="modal">
     <div class="modal-content">
         <span class="close">
-            <button onclick="document.querySelector('#{{ modal.id }} form').reset() ;document.querySelector('#{{ modal.id }}').classList.toggle('modal-active')">{{ modal['close-char'] }}</button>
+            <button onclick="document.querySelector('#{{ modal.id }} form').reset() ;document.querySelector('#{{ modal.id }}').classList.toggle('modal-active')">{{ modal['close-char'] | safe }}</button>
         </span>
         <form id="{{ modal.id }}-form" data-api-method="{{ modal['api-method'] }}" data-api-endpoint="{{ modal['api-endpoint'] }}">
             <h2>{{ modal.heading }}</h2>
@@ -41,4 +41,4 @@
             </div>
         </form>
     </div>
-</div>
+</div>

templates/zone.html.j2

@@ -4,8 +4,8 @@
 <link rel="stylesheet" href="{{ url_for('static', filename='css/zone.css') }}" />
 <link rel="stylesheet" href="{{ url_for('static', filename='css/modal.css') }}" />
 {% endblock %}
-{% set sort_up_icon = "&#x25b4;"%}
-{% set sort_down_icon = "&#x25be;"%}
+{% set sort_up_icon = "&#x25b4;" %}
+{% set sort_down_icon = "&#x25be;" %}
 {% block content %}
     <div class="manager">
         <div class="header-row">
@@ -41,9 +41,9 @@
                         {% if record_sort == 'name' %}
                         <span class="sort-order">
                             {% if record_sort_order == "asc" %}
-                            <a href="{{ url_for('zone', zone_name=zone.name, sort='name', sort_order='desc' ) }}"> {{ sort_up_icon }} </a>
+                            <a href="{{ url_for('zone', zone_name=zone.name, sort='name', sort_order='desc' ) }}"> {{ sort_up_icon | safe }} </a>
                             {% elif record_sort_order == "desc"%}
-                            <a href="{{ url_for('zone', zone_name=zone.name, sort='name', sort_order='asc' ) }}"> {{ sort_down_icon }} </a>
+                            <a href="{{ url_for('zone', zone_name=zone.name, sort='name', sort_order='asc' ) }}"> {{ sort_down_icon | safe }} </a>
                             {% endif %}
                         </span>
                         {% endif %}
@@ -53,9 +53,9 @@
                         {% if record_sort == 'type' %}
                         <span class="sort-order">
                             {% if record_sort_order == "asc" %}
-                            <a href="{{ url_for('zone', zone_name=zone.name, sort='type', sort_order='desc' ) }}"> {{ sort_up_icon }} </a>
+                            <a href="{{ url_for('zone', zone_name=zone.name, sort='type', sort_order='desc' ) }}"> {{ sort_up_icon | safe }} </a>
                             {% elif record_sort_order == "desc"%}
-                            <a href="{{ url_for('zone', zone_name=zone.name, sort='type', sort_order='asc' ) }}"> {{ sort_down_icon }} </a>
+                            <a href="{{ url_for('zone', zone_name=zone.name, sort='type', sort_order='asc' ) }}"> {{ sort_down_icon | safe }} </a>
                             {% endif %}
                         </span>
                         {% endif %}
@@ -65,9 +65,9 @@
                         {% if record_sort == 'ttl' %}
                         <span class="sort-order">
                             {% if record_sort_order == "asc" %}
-                            <a href="{{ url_for('zone', zone_name=zone.name, sort='ttl', sort_order='desc' ) }}"> {{ sort_up_icon }} </a>
+                            <a href="{{ url_for('zone', zone_name=zone.name, sort='ttl', sort_order='desc' ) }}"> {{ sort_up_icon | safe }} </a>
                             {% elif record_sort_order == "desc"%}
-                            <a href="{{ url_for('zone', zone_name=zone.name, sort='ttl', sort_order='asc' ) }}"> {{ sort_down_icon }} </a>
+                            <a href="{{ url_for('zone', zone_name=zone.name, sort='ttl', sort_order='asc' ) }}"> {{ sort_down_icon | safe }} </a>
                             {% endif %}
                         </span>
                         {% endif %}
@@ -80,9 +80,9 @@
                         {% if record_sort == 'comment' %}
                         <span class="sort-order">
                             {% if record_sort_order == "asc" %}
-                            <a href="{{ url_for('zone', zone_name=zone.name, sort='comment', sort_order='desc' ) }}"> {{ sort_up_icon }} </a>
+                            <a href="{{ url_for('zone', zone_name=zone.name, sort='comment', sort_order='desc' ) }}"> {{ sort_up_icon | safe }} </a>
                             {% elif record_sort_order == "desc"%}
-                            <a href="{{ url_for('zone', zone_name=zone.name, sort='comment', sort_order='asc' ) }}"> {{ sort_down_icon }} </a>
+                            <a href="{{ url_for('zone', zone_name=zone.name, sort='comment', sort_order='asc' ) }}"> {{ sort_down_icon | safe }} </a>
                             {% endif %}
                         </span>
                         {% endif %}
@@ -168,4 +168,4 @@
     </div>
     <script src="{{ url_for('static', filename='js/zone.js') }}"></script>
     <script src="{{ url_for('static', filename='js/modal.js') }}"></script>
-{% endblock %}
+{% endblock %}