aboutsummaryrefslogtreecommitdiffstats
path: root/view/tpl
diff options
context:
space:
mode:
authorMario <mario@mariovavti.com>2022-01-24 08:51:14 +0000
committerMario <mario@mariovavti.com>2022-01-24 08:51:14 +0000
commitffe2c4d42b47c529cb64c5267f31475c819439f0 (patch)
treeb059e6719cc2fca0f47bf28a172d5eee2ea62d2c /view/tpl
parentf06c970628ab9e33641e51d3b1ff13bab013b30e (diff)
downloadvolse-hubzilla-ffe2c4d42b47c529cb64c5267f31475c819439f0.tar.gz
volse-hubzilla-ffe2c4d42b47c529cb64c5267f31475c819439f0.tar.bz2
volse-hubzilla-ffe2c4d42b47c529cb64c5267f31475c819439f0.zip
make sure to escape the author name for the reply_to button
Diffstat (limited to 'view/tpl')
-rw-r--r--view/tpl/conv_item.tpl2
1 files changed, 1 insertions, 1 deletions
diff --git a/view/tpl/conv_item.tpl b/view/tpl/conv_item.tpl
index 415f24ece..47261d070 100644
--- a/view/tpl/conv_item.tpl
+++ b/view/tpl/conv_item.tpl
@@ -114,7 +114,7 @@
</button>
{{/if}}
{{if $item.reply_to}}
- <button type="button" title="{{$item.reply_to.0}}" class="btn btn-outline-secondary btn-sm" onclick="doreply({{$item.parent}}, {{$item.id}}, '{{$item.author_id}}', '{{$item.reply_to.2}} {{$item.name}}'); return false;">
+ <button type="button" title="{{$item.reply_to.0}}" class="btn btn-outline-secondary btn-sm" onclick="doreply({{$item.parent}}, {{$item.id}}, '{{$item.author_id}}', '{{$item.reply_to.2}} {{$item.name|escape:javascript}}');">
<i class="fa fa-reply" ></i>
</button>
{{/if}}