diff options
| author | Mario <mario@mariovavti.com> | 2022-01-24 08:51:14 +0000 |
|---|---|---|
| committer | Mario <mario@mariovavti.com> | 2022-01-24 08:51:14 +0000 |
| commit | ffe2c4d42b47c529cb64c5267f31475c819439f0 (patch) | |
| tree | b059e6719cc2fca0f47bf28a172d5eee2ea62d2c /view/tpl | |
| parent | f06c970628ab9e33641e51d3b1ff13bab013b30e (diff) | |
| download | volse-hubzilla-ffe2c4d42b47c529cb64c5267f31475c819439f0.tar.gz volse-hubzilla-ffe2c4d42b47c529cb64c5267f31475c819439f0.tar.bz2 volse-hubzilla-ffe2c4d42b47c529cb64c5267f31475c819439f0.zip | |
make sure to escape the author name for the reply_to button
Diffstat (limited to 'view/tpl')
| -rw-r--r-- | view/tpl/conv_item.tpl | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/view/tpl/conv_item.tpl b/view/tpl/conv_item.tpl index 415f24ece..47261d070 100644 --- a/view/tpl/conv_item.tpl +++ b/view/tpl/conv_item.tpl @@ -114,7 +114,7 @@ </button> {{/if}} {{if $item.reply_to}} - <button type="button" title="{{$item.reply_to.0}}" class="btn btn-outline-secondary btn-sm" onclick="doreply({{$item.parent}}, {{$item.id}}, '{{$item.author_id}}', '{{$item.reply_to.2}} {{$item.name}}'); return false;"> + <button type="button" title="{{$item.reply_to.0}}" class="btn btn-outline-secondary btn-sm" onclick="doreply({{$item.parent}}, {{$item.id}}, '{{$item.author_id}}', '{{$item.reply_to.2}} {{$item.name|escape:javascript}}');"> <i class="fa fa-reply" ></i> </button> {{/if}} |