From fc3b0621883ee67ca0a9ae4178126f9be477c097 Mon Sep 17 00:00:00 2001
From: Oliver Walters <oliver.henry.walters@gmail.com>
Date: Wed, 27 Apr 2022 22:09:25 +1000
Subject: [PATCH] Mark injected strings as safe

---
 InvenTree/templates/account/login.html | 2 +-
 InvenTree/templates/navbar.html        | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/InvenTree/templates/account/login.html b/InvenTree/templates/account/login.html
index 3e0865c4b9..042c119440 100644
--- a/InvenTree/templates/account/login.html
+++ b/InvenTree/templates/account/login.html
@@ -36,7 +36,7 @@ for a account and sign in below:{% endblocktrans %}</p>
 
   <hr>
   {% if login_message %}
-  <div>{{ login_message }}<hr></div>
+  <div>{{ login_message | safe }}<hr></div>
   {% endif %}
   <div class="btn-group float-right" role="group">
     <button class="btn btn-success" type="submit">{% trans "Sign In" %}</button>
diff --git a/InvenTree/templates/navbar.html b/InvenTree/templates/navbar.html
index 9b5ddd89a7..4660123e0d 100644
--- a/InvenTree/templates/navbar.html
+++ b/InvenTree/templates/navbar.html
@@ -90,7 +90,7 @@
     {% if navbar_message %}
       {% include "spacer.html" %}
       <div class='flex justify-content-center'>
-        {{ navbar_message }}
+        {{ navbar_message | safe }}
       </div>
       {% include "spacer.html" %}
       {% include "spacer.html" %}