lukas 3fb9aa9f84 Fix session-count script rendered as visible text ...

_GET_SESSION_COUNT_SCRIPT was a mark_safe string used as a child of the
view_game content tree. Under the "only Safe nodes render unescaped" rule, a
mark_safe *string* child is escaped — so the <script> showed as literal text
on the page. Make it a Safe node (and drop the now-unused mark_safe import).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-06-13 22:17:10 +02:00

..

__init__.py

separate views out 2/2

2024-08-12 21:52:26 +02:00

auth.py

Ban SafeText-as-child: only Safe nodes render unescaped

2026-06-13 18:35:43 +02:00

device.py

Phase 4: Page() collects component media; drop manual scripts= threading

2026-06-13 07:32:35 +00:00

filter_presets.py

Navbar returns a Safe node; drop redundant filter_presets mark_safe

2026-06-13 19:42:07 +02:00

game.py

Fix session-count script rendered as visible text

2026-06-13 22:17:10 +02:00

general.py

Phase 4: Page() collects component media; drop manual scripts= threading

2026-06-13 07:32:35 +00:00

platform.py

Phase 4: Page() collects component media; drop manual scripts= threading

2026-06-13 07:32:35 +00:00

playevent.py

Phase 4: Page() collects component media; drop manual scripts= threading

2026-06-13 07:32:35 +00:00

purchase.py

Migrate remaining Component() callers to Element; delete the shim

2026-06-13 16:51:27 +02:00

session.py

Ban SafeText-as-child: only Safe nodes render unescaped

2026-06-13 18:35:43 +02:00

stats_content.py

Ban SafeText-as-child: only Safe nodes render unescaped

2026-06-13 18:35:43 +02:00

stats_data.py

Fix more code smells

2026-06-06 13:14:55 +02:00

statuschange.py

Migrate remaining Component() callers to Element; delete the shim

2026-06-13 16:51:27 +02:00