From dd8825105151750d097b323e96a764168dd394ed Mon Sep 17 00:00:00 2001
From: Chad Whitacre <chad@zetaweb.com>
Date: Mon, 28 Aug 2017 08:05:13 -0400
Subject: [PATCH] Improve escaping while we're at it

Cf. #4585.
---
 www/on/npm/%package.spt | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/www/on/npm/%package.spt b/www/on/npm/%package.spt
index 727b246015..59125a6cce 100644
--- a/www/on/npm/%package.spt
+++ b/www/on/npm/%package.spt
@@ -124,7 +124,7 @@ if user.participant:
     {% endif %}
     <p class="fine-print">
         {{ _( 'Addresses are from {a}{code}maintainers{_code}{_a}.'
-            , a=('<a href="' + package.remote_api_url + '">')|safe
+            , a='<a href="%s">'|safe % package.remote_api_url
             , _a='</a>'|safe
             , code='<code>'|safe
             , _code='</code>'|safe
@@ -132,7 +132,7 @@ if user.participant:
     </p>
     <p class="fine-print">
         {{ _( 'Out of date? Update {a}at npm{_a} and refresh.'
-            , a=('<a href="' + package.remote_human_url + '">')|safe
+            , a='<a href="%s">'|safe % package.remote_human_url
             , _a='</a>'|safe
              ) }}
     </p>