From 008e0ab3656840aee1b7944bb3d5b58dee7f7ebe Mon Sep 17 00:00:00 2001
From: mo8it <mo8it@proton.me>
Date: Tue, 30 May 2023 16:10:00 +0200
Subject: [PATCH] Add safe to urls

---
 templates/404.html          |  6 ++++--
 templates/appointment.html  |  2 +-
 templates/index.html        | 13 ++++++++-----
 templates/offers.html       |  2 +-
 templates/partials/nav.html |  5 +++--
 5 files changed, 17 insertions(+), 11 deletions(-)

diff --git a/templates/404.html b/templates/404.html
index f7424d0..a2b7278 100644
--- a/templates/404.html
+++ b/templates/404.html
@@ -4,12 +4,14 @@
     <div class="container text-center">
         <h1 class="h1">Seite nicht gefunden</h1>
 
-        <img src="{{ get_url(path='images/404/bot.svg') }}"
+        <img src="{{ get_url(path='images/404/bot.svg') | safe }}"
              class="img-fluid"
              width="300" />
 
         <div class="d-grid gap-2 pt-3">
-            <a class="btn btn-dark" href="{{ get_url(path='/') }}" role="button">Zurück zur Startseite</a>
+            <a class="btn btn-dark"
+               href="{{ get_url(path='/') | safe }}"
+               role="button">Zurück zur Startseite</a>
         </div>
     </div>
 {% endblock %}
diff --git a/templates/appointment.html b/templates/appointment.html
index aaeb50f..9122555 100644
--- a/templates/appointment.html
+++ b/templates/appointment.html
@@ -49,7 +49,7 @@
     </div>
 
     <iframe id="iframe"
-            src="{{ get_url(path='oxiform') }}"
+            src="{{ get_url(path='oxiform') | safe }}"
             width="100%"
             title="Kontakt-Formular"></iframe>
 
diff --git a/templates/index.html b/templates/index.html
index 805ab59..ea48441 100644
--- a/templates/index.html
+++ b/templates/index.html
@@ -1,6 +1,9 @@
 {% extends "base.html" %}
 
-{% block styles %}<link rel="stylesheet" href="{{ get_url(path='leaflet/leaflet.css') }}" />{% endblock %}
+{% block styles %}
+    <link rel="stylesheet"
+          href="{{ get_url(path='leaflet/leaflet.css') | safe }}" />
+{% endblock %}
 
 {% block content %}
     <div class="row pb-3">
@@ -15,9 +18,9 @@
     </div>
 
     <div class="d-grid col-5 mx-auto gap-2 pt-2 pb-4">
-        <a href="{{ get_url(path='angebot') }}"
+        <a href="{{ get_url(path='@/angebot/index.md') | safe }}"
            class="btn btn-success grow-on-hover shadow">Unser Angebot</a>
-        <a href="{{ get_url(path='termin') }}"
+        <a href="{{ get_url(path='@/termin/index.md') | safe }}"
            class="btn btn-success grow-on-hover shadow">Terminvereinbarung</a>
     </div>
 
@@ -25,9 +28,9 @@
 {% endblock %}
 
 {% block scripts %}
-    <script src="{{ get_url(path='leaflet/leaflet.js') }}"></script>
+    <script src="{{ get_url(path='leaflet/leaflet.js') | safe }}"></script>
     <script>
-        L.Icon.Default.imagePath = "{{ get_url(path='leaflet/images/', trailing_slash=true) }}";
+        L.Icon.Default.imagePath = "{{ get_url(path='leaflet/images/', trailing_slash=true) | safe }}";
 
         var center = L.latLng(50.05635, 7.12507);
         var map = L.map('map', {
diff --git a/templates/offers.html b/templates/offers.html
index 2ea1559..2d237ab 100644
--- a/templates/offers.html
+++ b/templates/offers.html
@@ -69,7 +69,7 @@
         prices=["10€", "20€"]) }}
 
     <div class="d-grid col-5 mx-auto pt-2 pb-3">
-        <a href="{{ get_url(path='termin') }}"
+        <a href="{{ get_url(path='@/termin/index.md') | safe }}"
            class="btn btn-success grow-on-hover shadow">Terminvereinbarung</a>
     </div>
 
diff --git a/templates/partials/nav.html b/templates/partials/nav.html
index be6c1ed..cb1e5b4 100644
--- a/templates/partials/nav.html
+++ b/templates/partials/nav.html
@@ -15,7 +15,8 @@
 <nav class="navbar navbar-expand-lg"
      style="background-image: linear-gradient({{ config.extra.primary_color }}, 25%, white)">
     <div class="container-xxl">
-        <a class="navbar-brand grow-on-hover" href="{{ get_url(path='/') }}">
+        <a class="navbar-brand grow-on-hover"
+           href="{{ get_url(path='/') | safe }}">
             <!-- Use heigher resize_height for better resolution -->
             {% set resize_height = 85 %}
             {% set logo_meta = get_image_metadata(path=config.extra.logo_path) %}
@@ -26,7 +27,7 @@
                  {% set actual_height = 70 %}
                  {% set actual_width = logo_width_to_height_ratio * actual_height | int %}
                  width="{{ actual_width }}"
-                 height="{{ actual_height }}"/>
+                 height="{{ actual_height }}" />
         </a>
 
         <button class="navbar-toggler"