Phase 3: fixed template form editor

2026-02-23 11:23:49 -05:00
parent 09ba576fcb
commit 549a4e6278
2 changed files with 2 additions and 2 deletions
@@ -177,7 +177,7 @@ def form_editor(template_id):
    return render_template(
        'templates/form_editor.html',
        template=template,
-        form_schema_json=json.dumps(form_schema)
+        form_schema=form_schema          # pass the list — tojson handles encoding in the template
    )


@@ -389,7 +389,7 @@
     This avoids using |safe which bypasses Jinja2 auto-escaping and could allow
     stored XSS if the sanitiser ever lets a malicious value through. #}
  <div id="schema-data"
-       data-schema="{{ form_schema_json | tojson }}"
+       data-schema="{{ form_schema | tojson }}"
       style="display:none;"></div>

  <!-- PROPERTIES -->