From c958cc6f90ca5cd9d5a792577128339eadbc8d1e Mon Sep 17 00:00:00 2001 From: Mario Date: Fri, 1 Nov 2024 09:03:21 +0000 Subject: URL escape zid param in head.tpl This should fix issue #1877 fully. (cherry picked from commit 065f85bab11e13b95af6b99ce082c8a2f84a9de1) Co-authored-by: Harald Eilertsen --- view/tpl/head.tpl | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'view') diff --git a/view/tpl/head.tpl b/view/tpl/head.tpl index bf61a7ee4..d2efcced9 100644 --- a/view/tpl/head.tpl +++ b/view/tpl/head.tpl @@ -11,7 +11,7 @@ var updateInterval = {{$update_interval}}; var sse_enabled = {{$sse_enabled}}; var localUser = {{if $local_channel}}{{$local_channel}}{{else}}false{{/if}}; - var zid = {{if $zid}}'{{$zid}}'{{else}}null{{/if}}; + var zid = {{if $zid}}'{{$zid|escape:url}}'{{else}}null{{/if}}; var justifiedGalleryActive = false; {{if $channel_hash}}var channelHash = '{{$channel_hash}}';{{/if}} var channelId = {{if $channel_id}}{{$channel_id}}{{else}}false{{/if}};{{* Used in e.g. autocomplete *}} -- cgit v1.2.3