Security fixes: use tojson filter, fix Tuple import, remove raw value exposure

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
2026-02-07 22:38:58 +00:00
parent 54e93dcdf2
commit 4b4c208035
3 changed files with 4 additions and 5 deletions
@@ -160,8 +160,8 @@ function settingsApp() {
      // Initialize form data from current settings
      {% for category, settings_list in settings_data.items() %}
        {% for setting in settings_list %}
-          this.formData['{{ setting.key }}'] = '{{ setting.value }}';
-          this.originalData['{{ setting.key }}'] = '{{ setting.value }}';
+          this.formData['{{ setting.key }}'] = {{ setting.display_value|tojson }};
+          this.originalData['{{ setting.key }}'] = {{ setting.display_value|tojson }};
          this.showPassword['{{ setting.key }}'] = false;
        {% endfor %}
      {% endfor %}