<div class="panel panel-default permissions-confirm">
  <div class="panel-heading">
    <h4>Apply changes to contents?<h4>
  </div>
  <div class="panel-body">
      <%= I18n.t("hyrax.upload.change_access_message_html", curation_concern: curation_concern).html_safe %>
  </div>
  <div class="form-actions panel-footer">
    <%= button_to I18n.t("hyrax.upload.change_access_yes_message"), hyrax.copy_access_permission_path(curation_concern), class: 'btn btn-primary' %>
    <%= link_to I18n.t("hyrax.upload.change_access_no_message"), [main_app, curation_concern], class: 'btn' %>
  </div>
</div>

<div class="panel panel-default permissions-confirm">
  <div class="panel-heading">
    <h4>Apply changes to contents?<h4>
  </div>
  <div class="panel-body">
      <%= I18n.t("hyrax.upload.change_access_message_html", curation_concern: curation_concern) %>
  </div>
  <div class="form-actions panel-footer">
    <%= button_to I18n.t("hyrax.upload.change_access_yes_message"), hyrax.copy_access_permission_path(curation_concern), class: 'btn btn-primary' %>
    <%= link_to I18n.t("hyrax.upload.change_access_no_message"), [main_app, curation_concern], class: 'btn' %>
  </div>
</div>

Remove XSS vulnerability from `confirm_access` page
Remove XSS vulnerability from `confirm_access` page

This string was marked `#html_safe` even though it included user input. For now,
we remove that mark to remove the vulnerability and accept the unpleasant
formatting consequences.
