PrivateCoffee/invidious
4
1
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 2

Escape item titles in search page

Browse source
This commit is contained in:
Omar Roth 2020-03-04 13:03:14 -05:00
parent 0d536d11e3
commit 9dc4f8a1aa
No known key found for this signature in database
GPG key ID: B8254FB7EC3D37F2
1 changed files with 3 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
src/invidious/views/components/item.ecr
View file

@ -44,7 +44,7 @@
<% end %>
</div>
<% end %>
<p><%= item.title %></p>
<p><%= HTML.escape(item.title) %></p>
</a>
<p>
<b>
@ -76,7 +76,7 @@
<% end %>
</div>
<% end %>
<p><a href="/watch?v=<%= item.id %>"><%= item.title %></a></p>
<p><a href="/watch?v=<%= item.id %>"><%= HTML.escape(item.title) %></a></p>
</a>
<p>
<b>
@ -137,7 +137,7 @@
</div>
</a>
<% end %>
<p><a href="/watch?v=<%= item.id %>"><%= item.title %></a></p>
<p><a href="/watch?v=<%= item.id %>"><%= HTML.escape(item.title) %></a></p>
<p>
<b>
<a style="width:100%" href="/channel/<%= item.ucid %>"><%= item.author %></a>